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Preface 
This document describes the fields of the Cell Broadband Engine” (CBE) registers. This document should be 


used in conjunction with the Cell Broadband Engine Architecture (CBEA) and other supporting documents 
listed in Related Publications. 


Who Should Read This Manual 


This manual is intended for designers who plan to develop products using the CBE implementation of the 
CBEA. 


Related Publications 


A list of related materials follows. 
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Conventions and Notation 


Byte Ordering 


Throughout this document, standard IBM big-endian notation is used, meaning that bytes are numbered in 
ascending order from left to right. Big-endian and little-endian byte ordering are described in the Cell Broad- 
band Engine Architecture document. 


Note: In this document, storage units are defined as they are defined in the PowerPC Architecture. Quad- 
words are 128 bits, doublewords are 64 bits, words are 32 bits, halfwords are 16 bits, and bytes are 8 bits. 
Bit Ordering 


Bits are numbered in ascending order from left to right with bit O representing the most significant bit (MSb) 
and bit 31 the least significant bit (LSb). 





o|<— MSb 
®)<— LSb 


1/2/3)/4)/5/6)]7)]8) 9 |10}11)12)13)14)15)16) 17) 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 








































































































Bit Encoding 


Numbers are generally shown in decimal format, unless designated as follows: 


e Hexadecimal values are preceded by an “x” and enclosed in single quotation marks. 
For example: x‘OA00’. 


e Binary values in sentences are shown in single quotation marks. 
For example: ‘1010’. 


The binary point for fixed-point format data is at the right end of the field or value. Operations are performed 
with the binary points aligned, even if the fields are of different widths. 


Software Documentation Conventions 


The following software documentation conventions are used in this manual: 
e Commands and instruction names are written in bold type. For example: put. 


e Transactions are capitalized and are not bold to distinguish them from instructions. For example: The 
intent of the enforce in-order execution of I/O (EIEIO) transaction is to act as a barrier for two groups of 
transactions in support of the PowerPC Architecture eieio instruction. 


e Variables are written in italic type. Required parameters are enclosed in angle brackets. Optional param- 
eters are enclosed in brackets. For example: get<f,b>[s]. 


e I/O signal names are in upper case. 
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Referencing Registers, Fields, and Bit Ranges 


Registers are referenced by their full name or by their short name (also called the register mnemonic). Fields 
are referenced by their field name or by their bit position. The following table describes how registers, fields, 
and bit ranges are referenced in this document and provides examples of the references. 











name and the field name. 


Reference to a field using the 
field name. 


[Field_Name] 


Type of Reference Format Example 
Reference to a specific register and a 
specific field using the register short Register_Short_Name[Field_Name] MSR[R] 


[R] 





Reference to a specific register and to 
multiple fields using the register short 
name and the field names. 


Register_Short_Name[Field_Name1, Field_Name2] 


MSRI[FEO, FE1] 





Reference to a specific register and to 














multiple fields using the register short | Register_Short_Name[Bit_Number, Bit_Number] MSR[52, 55] 
name and the bit positions. 
Reference to a specific register and to a | Register_Short_Name[Bit_Number] MSR[52] 
field using the register short name and 
the bit position or the bit range. Register_Short_Name[Starting_Bit_Number:Ending_Bit_Number] MSR[39:44] 
A field name followed by an equal sign ; ; 1 MSR[FE0] = ‘1’ 
(=) and a value indicates the value for Register_Short_Name[Field_Name] = n MSR[FE] = x‘1’ 
that field. 
; , MSR[52] = ‘0’ 
ey 
Register_Short_Name[Bit_Number] = n MSRI52] = x'0’ 








Register_Short_Name[Starting_Bit_Number:Ending_Bit_Number] = n! 





MSR[39:43] = ‘10010’ 
MSR[39:43] = x11 
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1. Cell Broadband Engine Memory-Mapped I/O Registers 


This section defines the memory map for the memory-mapped I/O (MMIO) registers in the Cell Broadband 
Engine” (CBE). 


While the Cell Broadband Engine Architecture (CBEA) defines one base register (BP_Base, which is known 
as BE_MMIO_Base in the implementation) for relocating the internal registers, the CBE implements 
BE_MMIO_Base as several base registers that replicate this relocation function for the units, as shown in 
Table 1-1. These base register values are initialized from the configuration ring during the power-on reset 
(POR) sequence. 


The number of bits in these configuration ring fields is also shown in Table 1-1. In all cases, these bits corre- 
spond to the most significant bit of the 42-bit real-address implemented in the CBE. The most significant 19 
bits of all these configuration ring fields should be set to the same value. If a configuration ring field has more 
than 19 bits, these additional bits should be set to a value consistent with the settings in Table 1-3 on page 20 
for the starting address of that unit. Each Synergistic Processor Element (SPE) memory flow controller (MFC) 
unit has its own BE_MMIO_Base in the configuration ring, but each unit should be initialized to the same 
value. The Input/Output Controller (IOC) unit contains one configuration ring field that defines the most signif- 
icant 22 bits of the MMIO space for multiple units as shown in Table 1-1. 


The value of BE_MMIO_Base is relocatable, and the value of the most significant 19 bits is not specified in 
this document. 


Table 1-1. Registers That Are Replicated Forms of BE_MMIO_Base 























Configuration Ring Field Sets BE_MMIO_Base for the Units Below 
SPE BE_MMIO_Base Address (19 bits) SPEO-7 
PPE BE_MMIO_Base Address (30 bits) PPE 
MIC BE_MMIO _Base Address (30 bits) MIC 
PRV BE_MMIO_Base Address (30 bits) Pervasive 
BEI BE_MMIO_Base Address (22 bits) IIC, IOC Address Translation, IOC,BIC, and EIB 














1.1 Classification of Registers 


Registers in the MMIO memory map are classified as either Privilege 1, Privilege 2, or Problem State. These 
designations relate to a suggested hierarchy of privileged access. Privilege 1 registers are the most privi- 
leged. They are intended to be accessed by a hypervisor or firmware operating in the HV = ‘1’ and PR = ‘0’ 
mode, usually when supporting logical partitioning. Privilege 2 registers are intended for privileged operating 
system code running in HV = ‘0’ and PR = ‘0’ mode. When no hypervisor is present, firmware and the privi- 
leged operating system typically combine Privilege 1 and Privilege 2 resources into one privilege level. 
Problem State registers may be directly accessible by applications operating at the HV = ‘0’ and PR = ‘1’ 
modes, should an operating system so choose. Access to MMIO registers in these modes is not directly 
enforced by hardware. Enforcement of these accesses is left to the operating system and hypervisor devel- 
opers’ use of the translation facilities of the PPE memory management unit (MMU) when data relocation is 
active. 
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1.2 MMIO Access Rules for 32-Bit and 64-Bit Registers 


The CBE 32-bit registers must be accessed 32 bits at a time. No accesses are allowed on fewer than 32 bits. 
In addition, 64-bit access to an address range that includes a 32-bit register is not allowed, unless explicitly 
specified otherwise. 


The CBE 64-bit registers must be accessed either 64 bits or, if allowed, 32 bits at a time. No accesses are 
allowed on fewer than 32 bits. 


Table 1-2 lists the access rules for the 64-bit registers. 


Table 1-2. 64-Bit Register Access Rules 




















Doubleword | High Word Read Low Word Read Doubleword | High Word Write Low Word Write 
Address Space Read (bits [0:31]) (bits [32:63]) Write (bits [0:31]) (bits [32:63]) 
(bits [0:63]) (bits [0:63]) 
Problem Space yes yes yes yes yes yes 
Privilege with high word 
reserved and low word yes no yes yes no yes 
defined 
Privilege with high word 
defined and low word yes yes no yes yes no 
reserved 
Privilege space with both 
high and low word defined yes no 1e ree na me 





























1.3 The MMIO Memory Map 


Reserved areas of the MMIO memory map within assigned units, reserved registers, and reserved bits 
operate in the same way: writes have no effect and reads return zeros. No error flags are set when reserved 
locations that are assigned to units are written or read. Reserved areas of the MMIO memory map that are 
not assigned to any unit should not be read from or written to, as doing so causes serious errors in software. 


Table 1-3. CBE Memory Map (Page 1 of 3) 









































BE_MMIO_Base + 
Offset Range 
Size in Size in 
Start End Area Hexadecimal, Decimal Additional Information 
x0’ x‘O3FFFF’ |SPE(0) Local Store x‘40000’ 262144 
x040000'  x‘05FFFF’ SPE(0) Problem State x20000 | 131072 | [able 9-3 SPE Problem State Memory Map 
on page 50 
x060000’ | x‘07FFFF’ SPE(0) Privilege 2 x20000 | 131072 as ra SPE Privilege 2 Memory Map on 
x‘080000’ x‘OBFFFF’ SPE(1) Local Store x‘40000’ 262144 
x‘0C0000’ | x‘ODFFFF’ SPE(1) Problem State x20000 | 131072 | [able 3-3 SPE Problem State Memory Map 
on page 50 
x‘0E0000”  x‘OFFFEFF’ SPE(1) Privilege 2 x20000 | 131072 n Ka SPE Privilege 2 Memory Map on 
x‘100000’ x‘13FFFF’ SPE(2) Local Store x‘40000’ 262144 
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Table 1-3. CBE Memory Map (Page 2 of 3) 

















































































































BE_MMIO_Base + 
Offset Range 
Size in Size in 
Start End Area Hexadecimal) Decimal Additional Information 
x140000 | x‘15FFFF’ SPE(2) Problem State x20000 | 131072 | [able 9-3 SPE Problem State Memory Map 
on page 50 
160000’  x'17FFFF’ SPE(2) Privilege 2 x20000 131072 eae paa SPE Privilege 2 Memory Map on 
x‘180000’ x‘1BFFFF’ SPE(3) Local Store x‘40000’ 262144 
x1C0000'  x'1DFFFF’ SPE(3) Problem State x20000 | 131072 | [able 3-3 SPE Problem State Memory Map 
on page 50 
x1E0000° | x‘1FFFFF' SPE(3) Privilege 2 x20000 | 131072 — Fag SPE Privilege 2 Memory Map on 
x‘200000’ x‘23FFFF’ |SPE(4) Local Store x‘40000’ 262144 
x'240000’  x‘25FFFF’ SPE(4) Problem State x20000 | 131072 | [able 9-3 SPE Problem State Memory Map 
on page 50 
x‘260000'  x'27FFFF’ SPE(A) Privilege 2 x20000 | 131072 ied ja SPE Privilege 2 Memory Map on 
x‘280000’ x‘2BFFFF’ | SPE(5) Local Store x‘40000’ 262144 
x‘2C0000'  x‘2DFFFF’ SPE(5) Problem State x20000 | 131072 | /able 3-3 SPE Problem State Memory Map 
on page 50 
xX‘2E0000 | x‘2FFFFF' SPE(5) Privilege 2 x20000 | 131072 ibs a SPE Privilege 2 Memory Map on 
x‘300000’ x‘33FFFF |SPE(6) Local Store x‘40000’ 262144 
x'340000’ | x‘35FFFF" SPE(6) Problem State x20000 | 131072 | /able 9-3 SPE Problem State Memory Map 
on page 50 
x'360000'  x'37FFFF’ SPE(6) Privilege 2 x20000 | 131072 e rig SPE Privilege 2 Memory Map on 
x‘380000’ x‘3BFFFF’ SPE(7) Local Store x‘40000’ 262144 
x'3C0000’ | x'3DFFFF’ SPE (7) Problem State x20000 | 131072 | /able 3-3 SPE Problem State Memory Map 
on page 50 
xX‘3E0000 | x‘3FFFFF'  SPE(7) Privilege 2 x20000 | 131072 Ek FA] SPE Privilege 2 Memory Map on 
x‘400000’ x‘401FFF’ | SPE(0) Privilege 1 x‘2000’ 8192 
x‘402000° x‘403FFF’ | SPE(1) Privilege 1 x‘2000’ 8192 
x‘404000’ xX‘405FFF’ | SPE(2) Privilege 1 x‘2000’ 8192 
x‘406000’ x‘407FFF’ | SPE(3) Privilege 1 x‘2000’ 8192 Table 3-1 SPE Privilege 1 Memory Map on 
x‘408000’ | x‘409FFF’ |SPE(4) Privilege 1 x‘2000’ 8192 Page 46 
x‘40A000’ x‘40BFFF’ | SPE(5) Privilege 1 x‘2000’ 8192 
x‘40C000’ x‘40DFFF’ SPE(6) Privilege 1 x‘2000’ 8192 
x‘40E000’ x‘40FFFF’ | SPE(7) Privilege 1 x‘2000’ 8192 
i i : 7 i i f Table 2-1 PPE Privilege MMIO Memory 
x‘500000’ | x‘500FFF’ PPE Privilege x‘1000 4096 | Map on page 24 
x‘501000’ x‘507FFF’ Reserved 
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BE_MMIO_Base + 





Offset Range 







































































Size in Size in 
Start End Area Hexadecimal, Decimal Additional Information 
x‘508000’ x‘508FFF’ |IIC x‘1000’ 4096 Table 6-1 IIC Memory Map on page 145 
x‘509000’ x‘5093FF’ | Reserved 
x‘509400’ x‘5097FF’ | Pervasive: Performance Monitor x‘400’ 1024 Gee Pervasive Registers on 
, , ‘ , | Pervasive: Thermal Manni Table 11-1 Pervasive Registers on 
x‘509800 x‘509BFF and Power Management x‘400 1024 page 237 
x‘509C00’ x‘509FFF’ Pervasive: RAS x‘400’ 1024 Table 11-1 on page 237 
x50A000 | x‘50AFFF' MIC and TKM x'1000’ 4o96 |T2ble 8-1 TKM MMIO Memory Map on 
page 207 
x‘50B000’ X‘5OFFFF’ Reserved 
‘ , i , . i ; Table 5-1 IOC Address Translation MMIO 
x‘510000 x‘510FFF’ (IOC Address Translation x‘1000 4096 Memory Map on page 133 
x‘511000’ x‘5113FF’ | BIC O NCIk x‘400’ 1024 
x‘511400’ x‘5117FF’ (BIC 1 NCIk x‘400’ 1024 
: , f want Table 10-1 EIB MMIO Memory Map on 
x‘511800 x‘511BFF’ (EIB x‘400 1024 page 227 
x'511C00’ _x'511FFF’ IOC I/O Command x'400’ 1024 ey BEI IOC MMIO Memory Map on 
x‘512000’ x‘512FFF’ BIC 0 BClk x‘1000’ 4096 
x‘513000’ x‘513FFF’ BIC 1 BClk x‘1000’ 4096 
x‘514000’ x‘514FFF’ Reserved x‘1000’ 4096 
x‘515000’ x‘'7FFFFF’ | Reserved 
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2. PowerPC Processor Element (PPE) MMIO Registers 


This section describes the PPE memory-mapped I/O (MMIO) registers. Table 2-1 on page 24 shows the PPE 
MMIO memory map and lists the PPE registers. The PPE register space starts at x‘500 000’ and ends at 
x‘500 FFF’. Offsets are from the start of the PPE privilege area. For the complete CBE MMIO memory map, 
see Section 1 Cell Broadband Engine Memory-Mapped I/O Registers on page 19. 


The following notes apply to the register bit definitions: 


e Registers that have no implementation-specific bit definitions (all bits are as defined in the architecture) 
and have initial power-on reset (POR) values scanned to all zeros show only a cross-reference to 
Appendix A Registers Defined in the CBEA on page 335. 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Version 1.5 PowerPC Processor Element (PPE) MMIO Registers 
April 2, 2007 Page 23 of 357 


SONY 


Registers “> SONY 


COMPUTER: 
SREMARMER © 


Cell Broadband Engine 


Table 2-1. PPE Privilege MMIO Memory Map (Page 1 of 2) 


































































































Hexadecimal : 
Offset Register Name and (Short Name) Haas pie Additional Information 
(x‘500 nnn’) 

Level 2 (L2) Cache MMIO Registers 
x‘300’ L2 RMT Index Register (L2_RMT_Index) 64 R/W Not implemented 
x‘310’ L2 RMT Data Register (L2_RMT_Data) 64 RW _ Section 2.1.1 on page 26 
x‘800’ L2 Fault Isolation Register (L2_FIR) 
x‘810 L2 Fault Isolation Register Set (L2_FIR_Set) 
x‘820’ L2 Fault Isolation Register Reset (L2_FIR_Reset) 
x‘808’ L2 Fault Isolation Register Error Mask (L2_FIR_Err) 64 R/W Section 2.1.2 on page 27 
x‘818 L2 Fault Isolation Register Error Mask Set (L2_FIR_Err_Set) 
x‘828’ L2 Fault Isolation Register Error Mask Reset (L2_FIR_Err_Reset) 
x‘830’ L2 Fault Isolation Register Checkstop Enable (L2_FIR_ChkStopEnbi) 
x‘838’ Reserved 
x‘858’ L2 Mode Setup Register 1 (L2_ModeSetup1) 64 R/W Section 2.1.3 on page 31 
x‘858’ Reserved 
x‘870’ L2 Machine Check Enable Register (L2_Machchk_en) 64 R/W | Section 2.1.4 on page 33 
x‘878’ Reserved 

Core Interface Unit (CIU) MMIO Registers 
x‘900’ CIU Fault Isolation Register (CIU_FIR) 
x‘910’ CIU Fault Isolation Register Set (CIU_FIR_Set) 
x‘920’ CIU Fault Isolation Register Reset (CIU_FIR_Reset) 
x‘908’ CIU Fault Isolation Register Error Mask (CIU_FIR_Err) 64 R/W | Section 2.2.1 on page 34 
x918 CIU Fault Isolation Register Error Mask Set (CIU_FIR_Err_Set) 
x‘928’ CIU Fault Isolation Register Error Mask Reset (CIU_FIR_Err_Reset) 
x‘930’ CIU Fault Isolation Register Checkstop Enable (CIU_FIR_ChkStpEnbl) 
x‘938’ CIU Enable Recoverable Error Register (CIU_ERE) 64 R/W Section 2.2.2 on page 36 
x‘940’ CIU Local Recoverable Error Counter Register (CIU_REC) 64 R/W Section 2.2.3 on page 37 
x‘948’ CIU Mode Setup Register (CIU_ModeSetup) 64 R/W Section 2.2.4 on page 38 

x‘958’ — x‘A60’ Reserved 

Noncacheable Unit (NCU) MMIO Registers 

x‘A48’ NCU Mode Setup Register (NCU_ModeSetup) 64 R/W Section 2.3.1 on page 40 
x‘A58’ — x‘A60’ Reserved 
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Table 2-1. PPE Privilege MMIO Memory Map (Page 2 of 2) 









































Hexadecimal ; 
Offset Register Name and (Short Name) width Bea Additional Information 
‘ ; (Bits) Write 
(x‘500 nnn’) 
Bus Interface Unit (BIU) MMIO Registers 
x‘BOO’ BIU Fault Isolation Register (BIU_FIR) 
x‘B10’ BIU Fault Isolation Register Set (BIU_FIR_Set) 
x‘B20’ BIU Fault Isolation Register Reset (BIU_FIR_Reset) . 
x‘B08’ BIU Fault Isolation Register Error Mask (BIU_FIR_Err) 64 | R/W Section A.11 on page 345 
x‘B18’ BIU Fault Isolation Register Error Mask Set (BIU_FIR_Err_Set) 
x‘B28’ BIU Fault Isolation Register Error Mask Reset (BIU_FIR_Err_Reset) 
x‘B30’ BIU Fault Isolation Register Checkstop Enable (BIU_FIR_ChkStpEnbl) 
x‘B48’ BIU Mode Setup Register 1 (BIU_ModeSetup1) 64 R/W | Section 2.4.1 on page 41 
x‘B50’ BIU Mode Setup Register 2 (BIU_ModeSetup2) 64 R/W Section 2.4.2 on page 42 
x‘B60’ 
x‘B68’ BIU Reserved Registers 1-3 (BIU_Reserved_n) 64 R/W Section 2.4.3 on page 43 
x‘B70’ 
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2.1 L2 MMIO Registers 


2.1.1 L2 RMT Data Register (L2_RMT_Data) 


SONY 
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BE_MMIO_Ba 


se 


Value at Initial POR Value During POR Set By 


All bits set to zero 


Register Short Name L2_RMT_Data Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500310’ Memory Map Area PPE Privilege 


Scan initialization during POR 

























































































Specification Type Implementation-specific register | Unit L2 
RMT_rO RMT_r1 RMT_r2 RMT_r3 
M viv Vv 4 4 4 
O 1 2 3 4 5 6 7/8 9 10 11 12 13 14 15/16 17 18 19 20 21 22 23/24 25 26 27 28 29 30 31 
RMT_r4 RMT_r5 RMT_r6 RMT_r7 
M viv vy YY 4 
32 33 34 35 36 37 38 39/40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55/56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:7 RMT_rO Replacement management table (RMT) row 0 (classID = 000) 
8:15 RMT_r1 RMT row 1 (classID = 001) 
16:23 RMT_r2 RMT row 2 (classID = 010) 
24:31 RMT_r3 RMT row 3 (classID = 011) 
32:39 RMT_r4 RMT row 4 (classID = 100) 
40:47 RMT_r5 RMT row 5 (classID = 101) 
48:55 RMT_r6 RMT row 6 (classID = 110) 
56:63 RMT_r7 RMT row 7 (classID = 111) 

















Programming Note: For each RMT row, a field value of ‘00000000’ is treated logically as ‘11111111’. 
In other words, disabling all sets in an RMT row results in those sets being treated as if they were enabled. 
This is not allowed. 
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2.1.2 L2 Fault Isolation, Error Mask, Checkstop Enable Registers 


This section describes the L2 fault isolation registers (FIRs). 


Note: The L2_FIR_Reset and the L2_FIR_Err_Reset Registers have a value at initial POR set to 
x’00000000_001FFFFF’. The value listed in the table below is for the remaining L2 Fault Isolation, Error 
Mask, and Checkstop Enable Registers. 





Register Short Name 


Register Name 








L2_FIR 


L2 Fault Isolation Register 








L2_FIR_Set L2 Fault Isolation Register Set 
L2_FIR_Reset L2 Fault Isolation Register Reset 
L2_FIR_Err L2 Fault Isolation Register Error Mask 





L2_FIR_Err_Set 


L2 Fault Isolation Register Error Mask Set 





L2_FIR_Err_Reset 
L2_FIR_ChkStpEnbl 


L2 Fault Isolation Register Error Mask Reset 


L2 Fault Isolation Register Checkstop Enable 














BE_MMIO_Base 
Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Register Short Name See table above Privilege Type Privilege 1 
Access Type See table below Width 64 bits 
Hex Offset From See table below Memory Map Area PPE Privilege 


Scan initialization during POR 






























































Specification Type Implementation-specific register | Unit L2 
, Hex Offset From ; 
Register Short Name BE _MMIO_Base Access Type FIR Function 
L2_FIR x‘500800’ MMIO Read Only FIR Read 
L2_FIR_Set x‘500810’ MMIO Write Only FIR Set 
L2_FIR_Reset x‘500820’ MMIO Write Only FIR Reset 
L2_FIR_Err x‘500808’ MMIO Read Only Error Mask Read 
L2_FIR_Err_Set x‘500818’ MMIO Write Only Error Mask Set 
L2_FIR_Err_Reset x‘500828’ MMIO Write Only Error Mask Reset 
L2_FIR_ChkStpEnbl x‘500830’ MMIO Read/Write Checkstop Enable 
Reserved 
> 
4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
n 5 
= x 2 wu + 
8 r 2G n o 8 
+ oO æ 
w > £ 3s A igg FCS Syn uw 2 8 
20 9252) 553 L UÈSDO0OO0OO0OO BL 
3 Z, 55000 oan öz g | | | l lö 5 
& | © X | | | | | Sora QgQ | | 
og 2 Oo OZGCoaxx x CFEtTBBDG Fe 
oe J E Logg Cee eagegse ete &€& BSS 
Reserved CEU S$ gO ses f£ Ese fF 5 SS HO tTttesaeEE 
< 
a A A A A A A 2 2 AG 
32 33 34 35 36 37 38 39 40 41 42| 43] 44| 45 | 46| 47 |48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 
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Recommended Settings 
Bits Field Name Description Checksto 
p 
Error Mask Enable 
0:42 Reserved Bits are not implemented; all bits read back zero. 0 0 
L2 Cache correctable error (CE). 
When a correctable data error is detected on a processor request (instruc- 
tion or data type of transfer), the data is corrected before it is forwarded to 
43 CE the processor. The corrected data is written back to the L2 cache. 0 0 
When a correctable data error is detected on a castout request as the 
result of a flush, a read with intent to modify (RWITM) transaction, or the 
victim of a replacement, the data is corrected before it is forwarded to the 
bus interface unit (BIU). 
L2 Cache uncorrectable error (UE). 
When an uncorrectable error is detected in the L2 cache in response to a 
processor load request, a UE response is sent to the requesting PowerPC 
processor unit (PPU). When a store hits in an L2 cache line that contains 
the UE data, the store is merged into the line (timing does not permit dis- 
44 UE carding the store). An altered uncorrectable error (AUE) error correction 0 1 
code (ECC) is written to distinguish a data error written back to the L2 
cache from an error passed from another source. 
When an uncorrectable error is detected in the L2 cache in response to a 
castout operation, a data error (DERR) is sent to the BIU, and a special 
UE (SUE) is sent to memory. 
L2 cache special UE. BIU-to-L2 DERR. Cacheable side (I = ‘0’). 
Load miss data from the BIU has DERR active. The L2 updates the cache 
with an SUE ECC. For a PPU load request, the uncorrectable data is 
, passed to the PPU with a UE indicator. j 
a special_UE (Pass Through Error) 0 
Note: The caching-Inhibited (I) attribute bit for the instruction or data 
address in memory indicates whether requests are cacheable (| =’0') and 
sent to the L2 or noncacheable (I = ‘1’) and sent to the NCU. 
Noncacheable side (I = ‘1’) load data request (versus instruction). BIU-to- 
L2 DERR. 
The NCU load data from the BIU has DERR active. This error condition is 
46 Data_NCU_Derr normally a machine check case, but this FIR bit allows it to be a checkstop 1 9 
case if enabled using Checkstop Enable. 
(Pass Through Error) 
; L2 directory parity error. 
# dir_par_error The failing directory is refreshed with the contents of the other directory. 2 o 
L2 directory checkstop. 
48 dir_ckst When set, indicates that an L2 directory parity error has been detected on 0 1 
—CKSIp both halves of the directory (snoop and processor). 
(System Checkstop) 
L2 hang detection of various finite state machines (FSMs). 
The FSMs include: L2 read/claim (RC), castout (CO), snoop (SNP), and 
noncacheable control (Ncctl) hang detection. 
4 h tect 0 1 
ang_detec When set, indicates that there was no response to a memory read 
request. 
Livelock Resolution Mode: Error Mask = 0, Checkstop = 0 
Noncacheable side (I = ‘1’) load instruction request (versus data). BIU-to- 
L2 DERR. 
50 Int_NCU_Derr An NCU instruction load from the BIU has DERR active. The L2 passes 0 1 
the uncorrectable data to the PPU. 
(Pass Through Error) 
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Bits 


Field Name 


Description 


Recommended Settings 





Checkstop 


Error Mask Enable 








51 


storQ_par_error 


L2 store queue data parity error in the growable register file (GRF). 
There are eight parity error signals (data[O-7]_par_err): one for each dou- 
bleword of the 64-byte store request to the Read/Claim (RC) machine. 
This bit is set whenever one of the parity error signals is set. 





52 


hang_pulse_error 


L2 RC or Ncctl hang waiting for data from the BIU. 


The L2 RC or Nectl was waiting for a data tag match and detected two 
hang pulses. 


Livelock Resolution Mode: Error Mask = 0, Checkstop Enable = 0 





53 


unex_data 


L2 RC or Nectl unexpected data. 


The L2 RC or Nectl received a data tag match that the RC or Nectl 
machine was not expecting (for example, too many data valids [DVALs)). 





54 


unex_cresp 


L2 RC unexpected combined response (cresp). 
The L2 RC received an invalid cresp for an RC bus operation. 





55 


unex_MERSI 


L2 RC unexpected MERSI state. 


The L2 RC machine read an invalid Modified, Exclusive, Recent, Shared, 
Invalid (MERSI) state out of the L2 directory. 





56 


storQ_error 


L2 store queue internal control error. 
This bit is set as a result of the following types of errors: 
e Store queue overflow: sqctl_cfg_stq_overflow_err_dis 


e Incorrect first or second quadword command sequence: 
sqctl_cfg_stq_stqw_seq_err_dis 











57 


PAAM_error 


L2 Snoop PAAM error. 
A new snoop request violated the previous adjacent address match 
(PAAM) window of an active snoop request or of a busy local RC waiting 
for a combined response. 
This bit is set as a result of the following types of errors: 

e rcx_paam_violation: sndsp_cfg_rc_paam_err_dis 

e snp_collided_paam: sndsp_cfg_snp_paam_err_dis 
Note: If the EIB_ACOCTL configuration bits [13:15] are set to 0, 1, 2, 3, 6, 
or 7, then the Element Interconnect Bus (EIB) can reflect commands 
inside the PAAM window and force them to be retried. (The values 4 and 
5 are both DD1 mode-no PAAM violations period.) The default value is 6. 
For EIB modes 0, 1, 2, 3, 6, and 7, the L2 PAAM violation FIR bit must be 
masked, and the Checkstop Enable must be ‘0’. For EIB modes 4 and 5, 


the L2 PAAM violation FIR bit must not be masked, and the Checkstop 
Enable must be set to ‘1’. 


For support of default EIB settings, Error Mask = 1, Checkstop Enable = 
0. 








58 


quad0O_CE 


QuadrantO CE threshold. 
Multiple cache CEs were detected during a hang pulse duration. 





59 


quad1_CE 


Quadrant1 CE threshold. 
Multiple cache CEs were detected during a hang pulse duration. 





60 


quad2_CE 


Quadrant2 CE threshold. 
Multiple cache CEs were detected during a hang pulse duration. 





61 


quad3_CE 


Quadrant3 CE threshold. 
Multiple cache CEs were detected during a hang pulse duration. 





62 








multi_cache_CE 





Multiple cache CEs. 


Multiple cache CEs were detected during a hang pulse duration from 
more than one quadrant. 














Version 1.5 
April 2, 2007 


PowerPC Processor Element (PPE) MMIO Registers 


Page 29 of 357 


SONY 



































Registers S ONY 
Cell Broadband Engine 
Recommended Settings 
Bits Field Name Description Checksto 
p 
Error Mask Enable 
Multiple directory parity errors. 
Multiple directory parity errors were detected within a period of two hang 
63 multi_dir_par_error pulses. This indicates that the array error is not an intermittent fault. 0 1 
Because the memory flow controller (MFC) cannot make forward 
progress with a stuck fault in the directory, the system is checkstopped. 
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2.1.3 L2 Mode Setup Register 1 (L2_ModeSetup1) 


This register is used to set up and control various parts of the L2. L2_ModeSetup1[62:63] are used to select 
the RMT mode. 



































Register Short Name L2_ModeSetup1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500848’ Memory Map Area PPE Privilege 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit L2 

Reserved 


o a 


012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 



































Cc 
2 w 
a Ll 
= 5 
2 © o 
a s 
H = al $ 
O 
388 = 
DD DO = 
Reserved Y NA = 
i A, 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59|60|61/62 63 
Bits Field Name Description 
0:58 Reserved Bits are not implemented; all bits read back zero. 





L2 stops on noncacheable unit (NCU) data timeout. When this stop occurs, the L2_FIR register bit 
[52] gets set corresponding to the NCU data timeout, and a checkstop occurs. If this bit is set to ‘1’, 


59 L2_Stop_TO_Dis then the L2 goes through recovery, sets the L2_FIR bit [46], and sends a machine check. 
0 Enabled. L2 stops and holds its internal state if an NCU data timeout occurs. 
1 Disabled. L2 state machine continues as normal on an NCU data timeout. 





L2 stops on a Data_err on an NCU instruction fetch. When this stop occurs, the L2_FIR register bit 

[50] is set corresponding to the NCU instruction fetch on a Data_err, and a checkstop occurs. If this 

bit is set to ‘1’, then the L2 goes through recovery and sets the L2_FIR bit [50]. 

0 Enabled. L2 stops and holds its internal state on a Data_err on an NCU instruction fetch. 

1 Disabled. L2 state machine continues normal operation on a noncacheable instruction 
fetch Data_err. 


60 L2_Stop_Ins_Derr_Dis 





The default setting for this bit is for the L2 to continue normal operation when a Data_err on an NCU 
data fetch occurs, set the L2_FIR register bit [46], and a machine check occurs. If this bit is set to 
‘1’, then the L2_FIR register bit [46] corresponding to a Data_err on an NCU data fetch gets set, a 


machine check occurs, and the L2 stops (nonrecoverable error). 
61 L2_Stop_Data_Derr_En 

















0 Disabled. L2 state machine continues normal operation on a Data_err for an NCU Data 
fetch. 
1 Enabled. L2 stops and holds the internal state when a Data_err for an NCU Data fetch 
occurs. 
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11 


Bits Field Name Description 
Select the RMT Mode. 
00 Pseudo-RMT Mode. 
62:63 RMT_Mode 01 Not allowed. Produces undefined results. 
10 Binary least recently used (LRU) RMT mode. 


Direct-mapped mode. 
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2.1.4 L2 Machine Check Enable Register (L2_Machchk_en) 




































































Register Short Name L2_Machchk_en Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘500870’ Memory Map Area PPE Privilege 

BE_MMIO_Base 

Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 

Specification Type Implementation-specific register | Unit L2 

Reserved 

ii > 

O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
S 
a 
E- 
9 
= 
© 

Reserved = 
: vy 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62/63 
Bits Field Name Description 
0:62 Reserved Bits are not implemented; all bits read back zero. 





Machine check enable. 
0 Recoverable error is reported if L2_FIR[46] (Data_NCU_Derr bit) is set. 
63 mach_chk_en 1 Machine check occurs if L2_FIR[46] (Data_NCU_Derr bit) is set. 


Note: If L2_FIR[46] is set, a machine check interrupt (PPU interrupt vector x‘200’) occurs regard- 
less of the setting of this bit. 
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2.2 CIU MMIO Registers 


2.2.1 CIU Fault Isolation, Error Mask, Checkstop Enable Registers 


This section describes the CIU Fault Isolation Registers (FIRs). 


Note: The CIU_FIR_Reset and the CIU_FIR_Err_Reset Registers have a value at initial POR set to 
x’FFFO0000_00000000. The value listed in the table below is for the remaining CIU Fault Isolation, Error 
Mask, and Checkstop Enable Registers. 





Register Short Name 


Register Name 








CIU_FIR 


CIU Fault Isolation Register 








CIU_FIR_Err_Set 


CIU_FIR_Set CIU Fault Isolation Register Set 
CIU_FIR_Reset CIU Fault Isolation Register Reset 
CIU_FIR_Err CIU Fault Isolation Register Error Mask 


CIU Fault Isolation Register Error Mask Set 





CIU_FIR_Err_Reset 


CIU Fault Isolation Register Error Mask Reset 





CIU_FIR_ChkStpEnbl 


CIU Fault Isolation Register Checkstop Enable 





BE_MMIO_Base 


Register Short Name See table above Privilege Type Privilege 1 
Access Type See table below Width 64 bits 
Hex Offset From See table below Memory Map Area PPE Privilege 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 






































Specification Type Implementation-specific register | Unit CIU 

Register Short Name e Gace Access Type FIR Function 
CIU_FIR x‘500900’ MMIO Read Only FIR Read 
CIU_FIR_Set x‘500910’ MMIO Write Only FIR Set 
CIU_FIR_Reset x‘500920’ MMIO Write Only FIR Reset 
CIU_FIR_Err x‘500908’ MMIO Read Only Error Mask Read 
CIU_FIR_Err_Set x‘500918’ MMIO Write Only Error Mask Set 
CIU_FIR_Err_Reset x‘500928’ MMIO Write Only Error Mask Reset 
CIU_FIR_ChkStpEnbl x‘500930’ MMIO Read/Write Checkstop Enable 











IP DP PN PD MS MT MH NL NS NT NI CP 


A 2 2 2 2 2 2 2 2 2 2 


Reserved 





> 





07;1)/2/;3/;4)5)|6 


























7 





8 | 9 |1011 














12 13 14 15 16 17 18 19 20 21 22 23 


24 25 26 27 28 29 30 31 





< 


Reserved 





4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 


56 57 58 59 60 61 62 63 
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Recommended Settings 
Bits Field Name Description Checkstop 
Error Mask Enable 
0 IP PowerPC processor unit (PPU) instruction cache parity error 0 0 
Recoverable instruction cache parity error 
PPU data cache parity error 
1 DP , 0 0 
Recoverable data cache parity error 
PPU nonrecoverable error 
1 
2 PN PPE nonrecoverable error 9 
PPU debug checkstop 
3 PD IU debug checkstop 0 1 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
Memory management unit (MMU) segment lookaside buffer (SLB) parity 
error 
7 MS MMU nonrecoverable error 9 i 
An SLB translate or read operation has encountered a parity error. 
MMU translation lookaside buffer (TLB) parity error 
5 MT MMU nonrecoverable error 0 1 
A TLB translate or read operation has encountered a parity error. 
MMU load or store hung 
MMU nonrecoverable error 
6 MH A page table entry (PTE) load or store request has been pending without 0 1 
a response for too long. 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
NCU load time out 
7 NL The load-done signal has not been asserted for an outstanding caching- 0 1 
inhibited load or caching-inhibited fetch during a hang-pulse duration. 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
NCU store time out 
One of the store-done signals has not been asserted for an outstanding 
8 NS caching-inhibited store, SYNC, EIEIO, TLBIE, ICBI, or TLBSYNC during a 0 1 
hang-pulse duration. 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
NCU TLBIQ time out 
One of the TLBIQ state machines has been stacked during a hang-pulse 
9 NT : 0 1 
duration. 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
NCU ICBIQ time out 
One of the ICBIQ state machines has been stacked during a hang-pulse 
10 NI d : 0 1 
uration. 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
CIU data prefetch time out 
11 CP The data-prefetch-done signal has not been asserted for an outstanding 0 0 
data prefetch during a hang-pulse duration. 
Livelock resolution mode: Error Mask = 0, Checkstop Enable = 0 
12:63 Reserved Bits are not implemented; all bits read back zero. 0 0 
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Register Short Name 








BE_MMIO_Base 


CIU_ERE Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500938’ Memory Map Area PPE Privilege 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 








Specification Type 





Implementation-specific register 





Unit 


CIU 





















































IP DP Reserved 
> 
%4 4 y 
0/1/12 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0 IP Enable a recoverable instruction-cache parity error to increment the local recoverable-error counter. 
1 DP Enable a recoverable data-cache parity error to increment the local recoverable-error counter. 
2:63 Reserved Bits are not implemented; all bits read back zero. 
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2.2.3 CIU Local Recoverable Error Counter Register (CIU_REC) 
























































Register Short Name CIU_REC Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500940’ Memory Map Area PPE Privilege 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit CIU 
RC Reserved 
Y vy í 
O 1 2 3 4 56 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name Description 








Local recoverable-error counter for the PPU 


Counts the PPU recoverable errors (L1 instruction-cache parity errors and L1 data-cache parity 
errors) until the counter reaches its maximum value (all ones). At that time, the local carry signal is 
0:5 RC asserted for the test control unit (TCU). The error signals are converted to NCIk/2 signals and ORed 
so that they can be counted. Thus, there can be a miscount. If there is a checkstop error, the 
counter freezes. The TCU can reset this counter to zero. The register counts up to 63 errors and 
freezes there until reset by the TCU or preset by the MMIO. 

















6:63 Reserved Bits are not implemented; all bits read back zero. 
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2.2.4 CIU Mode Setup Register (CIU_ModeSetup) 



































Register Short Name CIU_ModeSetup Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘500948’ Memory Map Area PPE Privilege 
BE_MMIO_Base 

Value at Initial POR x‘01000000_00000000’ Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit CIU 

IP AC Rsvd_| PE PP PS PR PL PH PA Reserved 


BAER Seen R E AE, 
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Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
CIU Load Queue (CLQ) Instruction High-Priority Mode. The CIU arbiter normally gives a higher pri- 
ority to data load requests. 
0 IP 0 The arbiter grants data loads higher priority than instruction fetches. 
1 The arbiter grants instruction fetches higher priority than data loads. 
Note: This bit must be set to ‘0’ if both threads on the processor run in caching-inhibited space and 
both threads issue caching-inhibited instruction fetches. 
CLQ Always-Correct Mode 
When this bit is set, the CIU forces active the always-correct signal to the L2 for each request, 
1 AC which puts the L2 into Always-Correct mode. 
0 Pass to L2 from requester 
1 Force active to L2 
2:3 Rsvd_l Reserved. Latch bits are implemented; value read is the value written. 
Data Prefetch Enable 
4 PE 0 Treat data prefetch as a no-op. 
1 Enable data prefetch 
To disable data prefetch, deactivate all data prefetch streams before resetting this bit. 
Data Prefetch 4 KB Page Size 
5 PP 0 Set the read size (0 to 1) from the PPE. 
1 Limit data prefetch size to a maximum of 4 KB and stop at the 4 KB boundary. 
Data Prefetch 4/8 Disable 
The prefetch queue has eight entries to support the maximum number of streams. The entries are 
divided to support two threads. When both threads are running, each gets four prefetches. If only 
6 PS one thread is running, it gets eight prefetches (both halves). When this bit is set, only four entries 
are allocated per thread, regardless of the number of active threads. 
0 Eight entries for a single thread 
1 Four entries for a single thread 
Prefetch Outstanding Request Limit [0:2] 
This sets the limit for how many outstanding instruction or data prefetch requests can be in the L2. It 
sets the maximum numbers of L2 RC state machine resources for instruction or data prefetch. The 
7:9 PR default is ‘100’ (4). If the Prefetch Outstanding Request Limit 4 is set (CIU_ModeSetup[10] = ‘1’), 
then setting this bit has no effect. 
The values from ‘001’ (1) to ‘110’ (6) are valid for this limit number. In Data Prefetch Permanent 
High-Priority Mode (CIU_ModeSetupf[1 1] = ‘1’), this limit value must be less than ‘110’ (6). 
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Bits 


Field Name 


Description 








10 


PL 


Prefetch Outstanding Request Limit 4 
0 Enables the prefetch outstanding request limit. 
1 Disables the prefetch outstanding request limit and forces the count to four. 





11 


PH 


Data Prefetch Permanent High-Priority Mode 

If this bit is set, the priorities of load-type requests for L2 are changed to give higher priority to the 

data prefetch request. 

0 Data prefetch low-priority mode: MMU > Demand Load > Demand Fetch > Instruction 
Prefetch > Data Prefetch. If the instruction high-priority mode is set, Demand Load and 
Demand Fetch are swapped. 

1 Data prefetch high-priority mode: MMU > Data Prefetch > Demand Load > Demand Fetch 
> Instruction Prefetch. If the instruction high-priority mode is set, Demand Load and 
Demand Fetch are swapped. 

In the data prefetch permanent high-priority mode, the prefetch outstanding request limit 
must be less than ‘110’ (6). 





12 


PA 


Data Prefetch Periodical High-Priority Mode 

This bit has no effect if PH (CIU_ModeSetupf[1 1] = ‘1’) is set. If the PA (CIU_ModeSetup[12] = ‘1’) is 
set, the priorities of load-type requests for L2 are changed to give higher priority to the data prefetch 
request. This only occurs after the CIU issues 31 complete load-type requests to the L2 (except for 
the data prefetch from the last completed request of data prefetch) and the L2 acknowledges these 
requests. 

The changed priorities for PA (CIU_ModeSetup[12] = ‘1’) are as follows: 

MMU > Data Prefetch > Demand Load > Demand Fetch > Instruction Prefetch 





13:63 








Reserved 








Bits are not implemented; all bits read back zero. 
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2.3 NCU MMIO Registers 


2.3.1 NCU Mode Setup Register (NCU_ModeSetup) 








































































































Register Short Name NCU_ModeSetup Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500A48’ Memory Map Area PPE Privilege 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit NCU 
GD TC TD LB LM Reserved 
> 
vv Vy vy vy 
0o;/1 2 3 4)/5/6/7)|]8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Store-gather disable 
0 GD 0 Enable store gathering 
1 Disable store gathering 
4:4 TC Store-gather timeout programmable count (4 bits) 
i These are the higher-order bits of the preset value of the store-gather timeout counter. 
Store-gather timeout disable 
5 TD 0 Enable store-gather timeout 
1 Disable store-gather timeout 
Iwsync bus operation 
6 LB 0 NCU does not issue any bus operations to the element interconnect bus (EIB) for lwsync. 
1 NCU issues either SYNC or EIEIO to the EIB for lwsync. 
Iwsync mapping 
7 LM If the lwsync bus operation LB bit (NCU_ModeSetup[6)) is not set, this bit does not take effect. 
0 NCU issues a SYNC to the EIB for Iwsync. 
1 NCU issues an EIEIO to the EIB for lwsync. 
8:63 Reserved Bits are not implemented; all bits read back zero. 
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2.4 BIU MMIO Registers 


2.4.1 BIU Mode Setup Register 1 (BIU_ModeSetup1) 











BE_MMIO_Base 
Value at Initial POR 


Register Short Name BIU_ModeSetup1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500B48’ Memory Map Area PPE Privilege 


All bits set to zero 


Value During POR Set By Scan initialization during POR 


























































































































Specification Type Implementation-specific register | Unit BIU 
QO 
LL 
= 
o 
no 
is) 
a 
D O 
Soc 2 Ss 
Ou 6 &§ 
Q QO Q 
£2 È y 
L q <x a 
on Wn i) | 
ce £ Reserved MemMskReg_EIBAddr Reserved 
> 
Sn 2 a 4 x vv 
0/1/12 3/;4/5 6 7 8 9 10 11 12 13/14 15 16 17 18 19 20 21 22 23 24 25 26 27 28/29 30 31 
Reserved MemRng_EIBAddr Reserved 
< 
vv 4 v 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45/46 47 48 49 50 51 52 53 54 55 56 57 58 59 60/61 62 63 
Bits Field Name Description 
Resource Allocation Override. Read only. 
o RESAIOCOWTO Note: This bitis a copy of bzf_bzl_ra_override in the BIU Configuration Scan Register. 
Resource Allocation Enable 
1 ResAllocEn 0 Disable 
1 Enable 
2:3 ResAllocGrp Resource Allocation Group ID 
L2 BE_MMIO_Base Match Filter Disable 
0 Enabled. The BIU does not send a bus-read or bus-write reflected command to the L2 if its 
4 L2_BE_MMIO_Base_M address is inside the BE_MMIO_Base range. BE_MMIO_Base is architecturally defined as 
FD noncoherent. 
1 Disabled. If this bit is ‘1’ and M = ‘1’, the BIU sends a bus-read or bus-write reflected com- 
mand to the L2, regardless of its address. 
5:13 Reserved Bits are not implemented; all bits read back zero. 
. Memory Mask Register bits [0:14] 
14:28 | MemMskReg_EIBAddr | AND mask for EIB address bits [22:36] 
29:45 Reserved Bits are not implemented; all bits read back zero. 
46:60 MemRng_EIBAddr | Memory range bits [0:14]. Compare to the EIB address [22:36]. 
61:63 Reserved Bits are not implemented; all bits read back zero. 
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BE_MMIO_Base 


Register Short Name BIU_ModeSetup2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500B50’ Memory Map Area PPE Privilege 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 






























































Specification Type Implementation-specific register | Unit BIU 
Reserved IOIF1Msk 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
g 
2 
o 
no 
£ MMIORng 
%4 y 4 
32 33/34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:21 Reserved Bits are not implemented; all bits read back zero. 
22:31 IOIF1Msk IOIF1 Mask 
32:33 Reserved Bits are not implemented; all bits read back zero. 
: MMIO range. Read only. 
94:63 MMIORNg Note: This is a copy of MMIO range0 scan configuration ring register (oz_bb_range0[22:51]). 
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2.4.3 BIU Reserved Registers 1-3 (BIU_Reserved_n) 













































































Register Short Name BIU_Reserved_1 Privilege Type Privilege 1 
BIU_Reserved_2 
BIU_Reserved_3 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘500B60’ Memory Map Area PPE Privilege 
BE_MMIO_Base x‘500B68 
x‘500B70’ 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit BIU 
Rsvd_l 
4 > 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Rsvd_l 
2 4} 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:63 Rsvd_l Reserved. Latch bits are implemented; value read is the value written. 
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3. Synergistic Processor Element MMIO Registers 


This section describes the SPE memory-mapped I/O (MMIO) registers. Registers and areas marked as 
implementation specific are not part of the architecture. The detailed description of each register includes the 
complete hexadecimal offset from BE_MMIO_Base. For the complete CBE MMIO memory map, see 
Section 1 Cell Broadband Engine Memory-Mapped I/O Registers on page 19. 


For a list of SPE memory-mapped control registers, see the following sections: 


e Section 3.1.1 SPE Privilege 1 Memory Map 
e Section 3.1.2 SPE Privilege 2 Memory Map 
e Section 3.1.3 SPE Problem State Memory Map 


The following notes apply to the register bit definitions: 


e Registers that have no implementation-specific bit definitions (all bits are as defined in the architecture) 
and have initial power-on reset (POR) values scanned to all zeros show only a cross-reference to 
Appendix A Registers Defined in the CBEA on page 335. 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Version 1.5 Synergistic Processor Element MMIO Registers 
April 2, 2007 Page 45 of 357 


SONY 


SONY 


Registers 


Cell Broadband Engine 


3.1 SPE Memory Map and Summary Tables 


The detailed description of each register includes the complete hexadecimal offset from BE_MMIO_Base. 
The summary tables that follow list the registers by memory map area; therefore, only the last four digits of 
the offset are included. 


3.1.1 SPE Privilege 1 Memory Map 


Table 3-1. SPE Privilege 1 Memory Map (Page 1 of 3) 














































































































Hexadecimal . r Read/ HP : 
Offset Register Name and (Short Name) Width Write Additional Information 
MFC Registers (CBEA Architected Registers) 
x‘0000’ MFC State Register 1 (MFC_SR1) 64 | R/W See Appendix A Registers Defined in the CBEA 
i ; MFC Logical Partition ID Register ; 
x‘0008 (MFC_LPID) 64 | R/W Section 3.2.1.1 on page 52 
x‘0010’ SPU Identification Register (SPU_ID) 64 Section 3.2.1.2 on page 53 
x‘0018’ MFC Version Register (MFC_VR) 64 See Appendix A Registers Defined in the CBEA 
x‘0020’ SPU Version Register (SPU_VR) 64 See Appendix A Registers Defined in the CBEA 
x‘0028’ — x‘OOFF’ | Reserved 
Interrupt Registers (CBEA Architected Registers) 
‘ ; Class 0 Interrupt Mask Register 
x‘0100 (INT_Mask_class0) 64 R/W | Section 3.2.2.1 on page 54 
i i Class 1 Interrupt Mask Register ; F ; 3 
x‘0108 (INT_Mask_class1) 64 R/W |See Appendix A Registers Defined in the CBEA 
: ; Class 2 Interrupt Mask Register : 
x‘0110 (INT_Mask_class2) 64 R/W | Section 3.2.2.2 on page 55 
x‘0118’— x‘013F’ Reserved 
í ; Class 0 Interrupt Status Register 
x‘0140 (INT_Stat_class0) 64 RW Section 3.2.2.3 on page 56 
i ; Class 1 Interrupt Status Register ; : ; ; 
x‘0148 (INT_Stat_class1) 64 R/W |See Appendix A Registers Defined in the CBEA 
‘ ; Class 2 Interrupt Status Register : 
x‘0150 (INT_Stat_class2) 64 R/W | Section 3.2.2.4 on page 57 
x‘0158’ — x‘017F’ Reserved 
x‘0180’ Interrupt Routing Register (INT_Route) 64 | RW _ Section 3.2.2.5 on page 58 
x‘0198’ — x‘O1FF’ | Reserved 
Atomic Unit Control Registers (/mplementation-Specific Registers) 
: ; MFC Atomic Flush Register ; > > ; 
x‘0200 (MFC_Atomic_Flush) 64 | R/W See Appendix A Registers Defined in the CBEA 
‘ ; Resource Allocation Group ID > 
x‘0280 (RA_Group_ID) 64 RW Section 3.2.3.1 on page 59 
‘ ; Resource Allocation Enable Register : 
x‘0288 (RA_Enable) 64 RW | Section 3.2.3.2 on page 60 
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Hexadecimal . , Read/ 7 ; 
Offset Register Name and (Short Name) Width Write Additional Information 
Fault Isolation Registers (/mplementation-Specific Registers) 
x‘0290’ — x‘0378’ | Reserved 
x‘0380’ MFC Fault Isolation Register (MFC_FIR) 
x‘0388’ MFC Fault Isolation Register Set 
(MFC_FIR_Set) 
x‘0390’ MFC Fault Isolation Register Reset 
(MFC_FIR_Reset) ; 
x‘0398’ MFC Fault Isolation Error Mask Secon aoe = page =) R 
The starting point for SPE registers depends on the 
(MFC_FIR_Err) 64 | R/W | address of the SPE. Th to eight SPE 
x‘03A0’ MFC Fault Isolation Error Set Mask al ae as ele Op Oe San 
(MFC_FIR_Err_Set) a chip. 
x‘03A8’ MFC Fault Isolation Error Reset Mask 
(MFC_FIR_Err_Reset) 
x‘03B0’ MFC Checkstop Enable Register 
(MFC_FIR_ChkStpEnbi) 
Miscellaneous Registers (/mplementation-Specific Registers) 
Haa MFC SBI Data Error Address Register ; 
x ‘3B8 (MFC_SBI_Derr_Addr) 64 R | Section 3.2.5.1 on page 65 
RARI MFC Command Queue Error ID Register . 
x ‘3C0 (MFC_CMDQ_Err_ID) 64 R | Section 3.2.5.2 on page 66 
x‘03C8’ — x‘0O3F8’ | Reserved 
MFC TLB Management Registers (CBEA Architected Registers) 
‘ ; MFC Storage Description Register ; 
x‘0400 (MFC_SDR) 64 | RW _ Section 3.2.8.1 on page 73 
x‘0408’ — x‘O4FF’ Reserved 
i i MFC TLB Index Hint Register f 
x‘0500 (MFC_TLB_Index_Hint) 64 R |Section 3.2.8.2 on page 74 
x‘0508’ MFC TLB Index Register (MFC_TLB_Index) 64 R/W | Section 3.2.8.3 on page 75 
i ; MFC TLB Virtual Page Number Register ‘ 
x‘0510 (MFC_TLB_VPN) 64 | RW | Section 3.2.8.4 on page 76 
‘ ; MFC TLB Real Page Number Register . 
x‘0518 (MFC_TLB_RPN) 64 RW _ Section 3.2.8.5 on page 77 
x‘0520’ — x‘053F’ | Reserved 
i ; MFC TLB Invalidate Entry Register s 
x‘0540 (MFC_TLB_Invalidate_Entry) 64 W _ Section 3.2.8.6 on page 79 
MFC TLB Invalidate All Register _ _ : 
= (MFC_TLB_Invalidate_All) Not implemented 
Memory Management Register (Implementation-Specific Register) 
‘ ; SMM Hardware Implementation Dependent ; 
x‘0580 Register (SMM_HID) 64 | RW Section 3.2.9.1 on page 81 
MFC Status and Control Registers (CBEA Architected Registers) 
i ; MFC Address Compare Control Register : F : ; 
x‘0600 (MFC_ACCR) 64 | R/W |See Appendix A Registers Defined in the CBEA 
Í ; MFC Data-Storage Interrupt Status Register ; : p : 
x‘0610 (MFC_DSISR) 64 | R/W |See Appendix A Registers Defined in the CBEA 
x‘0620’ MFC Data Address Register (MFC_DAR) 64 | R/W |See Appendix A Registers Defined in the CBEA 
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Table 3-1. SPE Privilege 1 Memory Map (Page 3 of 3) 





Read/ 
Write 


Hexadecimal 


Offset wai 


Register Name and (Short Name) Additional Information 

















x‘0628’ — x‘O6FF’ 


Reserved 





Replacement Management Table (RMT) Registers (/mplementation-Specific Registers) 





MFC TLB Replacement Management Table 
Index Register (MFC_TLB_RMT_Index) 


Not implemented 





x‘0710’ 


MFC TLB Replacement Management Table 
Data Register (MFC_TLB_RMT_Data) 


64 


R/W 


Section 3.2.10 on page 82 





x‘0718’ — x‘07FF’ 


SPU_RMT_ImplRegs 


Not implemented 





MFC Command Data-Storage Interrupt Registers (/mp/lementation-Spe 


cific Registers) 





MFC Data-Storage Interrupt Pointer Register 














(MFC_TClassID) 











x‘0800’ (MFC_DSIPR) 64 R |Section 3.2.11.1 on page 83 
x‘0808’ ita Ba Address Compare Register 64 R/W | Section 3.2.11.2 on page 84 
x'0810’ eee e Compare Results Register | ¢4 | R | Section 3.2.11.3 on page 85 
x‘0818" Reserved 

x‘0820’ MPG Transfer Class ID Register 64 R/W | Section 3.2.11.4 on page 86 





x‘0828’ — x‘087F’ 


Reserved 








DMAC Unit Performance Monitor Control Register (/mplementation-Specific Register) 





x‘0880’ 


DMAC Unit Performance Monitor Control 
Register (DMAC_PMCR) 





64 





R/W 





Section 3.2.12.1 on page 88 





x‘0888’ — x‘08FF’ 


Reserved 





Real-Mode Support Registers (CBEA Architected Register) 





x‘0900’ 


MFC Real Mode Address Boundary Register 
(MFC_RMAB) 





64 





R/W 





See Appendix A Registers Defined in the CBEA 





x‘0908’ — x‘OBFF’ 


Reserved 





MFC Command Error Register 





x‘0C00’ 


MFC Command Error Register (MFC_CER) 





64 








Section 3.2.13.1 on page 90 





x‘0C08’ — x‘OF FF’ 


Reserved 





SPU ECC and Erro 


r Mask Registers (/mplementation-Specific Registers) 
































Mask Register (PM_Trace_Tag_Wait_Mask) 











x‘1000’ SPU ECC Control Register (SPU_ECC_Cntl)| 64 | R/W | Section 3.2.14.1 on page 91 
x‘1008’ SPU ECC Status Register (SPU_ECC_Stat) | 64 | R/W | Section 3.2.14.2 on page 92 
‘ f SPU ECC Address Register : 
x‘1010 (SPU_ECC_Addr) 64 R |Section 3.2.14.3 on page 94 
x‘1018’ SPU Error Mask Register (SPU_ERR_Mask) | 64 R/W | Section 3.2.14.4 on page 95 
x‘'1028’ — x‘13FF’ Reserved 
Performance Monitor Register (implementation-Specific Register) 
x'1400° Performance Monitor/Trace Tag Status Wait 64 | R/W Section 3.2.15.1 on page 96 





x'1408 — x1 FFF’ 





Reserved 
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3.1.2 SPE Privilege 2 Memory Map 
Multiple address offsets for a register indicate that there are multiple instances of this register. 


Table 3-2. SPE Privilege 2 Memory Map (Page 1 of 2) 






































































































































Hexadecimal : ; Read/ aci , 
Offset Register Name and (Short Name) Width Write Additional Information 
MFC Registers 
x‘0000’ — x‘10FF’ Reserved 
SLB Management Registers (CBEA Architected Registers) 
x‘1100’ Reserved 
x‘1108’ SLB Index Register (SLB_Index) 64 R/W | Section 3.3.1.1 on page 97 
i i SLB Effective Segment ID Register ; ; : : 
x‘1110 (SLB_ESID) 64 R/W |See Appendix A Registers Defined in the CBEA 
í : SLB Virtual Segment ID Register ; 
x‘1118 (SLB_VSID) 64 R/W | Section 3.3.1.2 on page 98 
‘ i SLB Invalidate Entry Register ; 
x‘1120 (SLB_Invalidate_Entry) 64 W ss Section 3.3.1.3 on page 99 
‘ A SLB Invalidate All Register ; ; . ; 
x‘1128 (SLB_Invalidate_All) 64 W ‘See Appendix A Registers Defined in the CBEA 
x‘1130’—x‘1FFF’ Reserved 
Context Save/Restore Register (/mplementation-Specific Register) 
i TO , | MFC Command Queue Context : 
x‘2000’ — x‘22FF Save/Restore Register (MFC_CQ_SR) 64 R/W | Section 3.3.2.1 on page 100 
x‘2300’ — x‘2FF8’ Reserved 
MFC Control Register (CBEA Architected Register) 
x‘3000’ MFC Control Register (MFC_CNTL) 64 R/W |See Appendix A Registers Defined in the CBEA 
x‘3008’ — x‘8FFF’ MFC_Cnti1_ImplRegs — — Not implemented 
Interrupt Mailbox Register (Implementation-Specific Register) 
í ; SPU Outbound Interrupt Mailbox Register : F ; ; 
x‘4000 (SPU_OutIntrMbox) 64 R (See Appendix A Registers Defined in the CBEA 
SPU Control Registers (CBEA Architected Registers) 
‘ , SPU Privileged Control Register ; : ; ; 
x‘4040 (SPU_PrivCntl) 64 R/W See Appendix A Registers Defined in the CBEA 
x‘4058’ SPU Local Store Limit Register (SPU_LSLR) | 64 R/W | Section 3.3.2.2 on page 105 
i , SPU Channel Index Register ; F : : 
x‘4060 (SPU_Chnllndex) 64 R/W |See Appendix A Registers Defined in the CBEA 
x‘4068’ SPU Channel Count Register (SPU_ChniCnt),| 64 R/W | Section 3.3.2.3 on page 106 
x‘4070° SPU Channel Data Register (SPU_ChniData), 64 R/W |See Appendix A Registers Defined in the CBEA 
x‘4078’ SPU Configuration Register (SPU_Cfg) 64 R/W |See Appendix A Registers Defined in the CBEA 
x‘4080’ — x‘4FFF Reserved 
Context Save and Restore Registers (/mplementation-Specific Registers) 
x‘5000° Reserved 
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Table 3-2. SPE Privilege 2 Memory Map (Page 2 of 2) 
































ac te Register Name and (Short Name) Width ae Additional Information 
x'5008’ Prete E ek pag 64 | R/W Section 3.3.3.1 on page 107 
x‘5010’ Peas ee ak NDI 64 | R/W Section 3.3.3.2 on page 108 
x5018" alleges td cee ee pie 64 | R/W Section 3.3.3.3 on page 109 
x‘5020° pe a eae Ae 64 R/W | Section 3.3.3.4 on page 110 
x‘5028’ — x‘1FFFF Reserved 














3.1.3 SPE Problem State Memory Map 
Multiple address offsets for a register indicate that there are multiple instances of this register. 


Table 3-3. SPE Problem State Memory Map (Page 1 of 2) 


Read/ 
Write 


Hexadecimal 


Offset Register Name and (Short Name) Width Additional Information 








SPE Multisource Synchronization Register (/mplementation-Specific Register) 





i ; MFC Multisource Synchronization Register , 
x‘0000 (MFC_MSSync) 64 R/W | Section 3.4.1.1 on page 111 











x‘0008’ — x‘2FF8’ | Reserved 





MFC Command Parameter Registers (CBEA Architected Registers) 








x‘3000’ Reserved 
: , MFC Local Store Address Register . 
x‘3004 (MFC_LSA) 32 W _ Section 3.4.2.1 on page 112 
x‘3008’ MFO Efectiva Address High- Register 32 | R/W See Appendix A Registers Defined in the CBEA 


(MFC_EAH) 





MFC System Memory Address Register 


x‘300C’ 32 | R/W See Appendix A Registers Defined in the CBEA 














(MFC_EAL) 
MFC Transfer Size Register (MFC_Size) 16 | R/W See Appendix A Registers Defined in the CBEA 
x‘3010’ 
MFC Command Tag Register (MFC_Tag) 16 R/W See Appendix A Registers Defined in the CBEA 
: ; MFC Class ID and Command Opcode Regis- : 
x'3014 ter (MFC_ClassID_CMD) 32 W _ Section 3.4.2.2 on page 113 
: ; MFC Command Status Register p 
x‘3014 (MFC_CMDStatus) 32 R |Section 3.4.2.3 on page 114 














Reserved Area 














x‘3020' — x‘30FF’ | Reserved 
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Table 3-3. SPE Problem State Memory Map (Page 2 of 2) 


Registers 


Cell Broadband Engine 

























































































(SPU_Sig_Notify_2) 








Hexadecimal ; ; Read/ na : 
Offset Register Name and (Short Name) Width Write Additional Information 
MFC Command Queue Control Registers (CBEA Architected Registers) 
x‘3104’ MFC Queue Status Register (MFC_QStatus) | 32 R__ Section 3.4.3.1 on page 115 
i i Proxy Tag-Group Query Type Register . ; : ; 
x‘3204 (Prxy_QueryType) 32 | R/W See Appendix A Registers Defined in the CBEA 
‘ , Proxy Tag-Group Query Mask Register p : : : 
x‘321C (Prxy_QueryMask) 32 | R/W See Appendix A Registers Defined in the CBEA 
i , Proxy Tag-Group Status Register ; ; f 
x‘322C (Prxy_TagStatus) 32 R (See Appendix A Registers Defined in the CBEA 
Reserved Area 
x‘3330’ — x‘3FFF’ Reserved 
SPU Control Registers (CBEA Architected Registers) 
‘ ; SPU Outbound Mailbox Register : : n i 
x‘4004 (SPU_Out_Mbox) 32 R (See Appendix A Registers Defined in the CBEA 
t i SPU Inbound Mailbox Register ; ; ; 
x‘400C (SPU_In_ Mbox) 32 W | See Appendix A Registers Defined in the CBEA 
; ; SPU Mailbox Status Register p 
x‘4014 (SPU_Mbox_Stat) 32 R__ Section 3.4.3.2 on page 116 
x‘401C’ SPU Run Control Register (SPU_RunCntl) 32 R/W | Section 3.4.3.3 on page 117 
x‘4024’ SPU Status Register (SPU_Status) 32 R__| Section 3.4.3.4 on page 118 
i i SPU Next Program Counter Register . 
x‘4034 (SPU_NPC) 32 | R/W Section 3.4.3.5 on page 120 
Reserved Area 
x‘4038’ — x‘13FFF’ | Reserved 
Signal Notification Registers (CBEA Architected registers) 
è ; SPU Signal Notification Register 1 ; : : : 
x‘1400C (SPU_Sig_Notify_1) 32 | R/W See Appendix A Registers Defined in the CBEA 
x‘14010’ — x‘1BFFF’ Reserved 
x'1C00C’ SPU Signal Notincaton Hegister z 32 | R/W See Appendix A Registers Defined in the CBEA 








x‘1C010' — x‘1 FFFF’ 








Reserved 
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3.2 SPE Privilege 1 Memory Map Registers 


This section lists the registers included in the SPE Privilege 1 memory map, with the exception of those that 
are defined in the CBEA. See Appendix A Registers Defined in the CBEA for information about those regis- 
ters. 


3.2.1 MFC Register 


This area includes the Logical Partition ID Register and the SPU ID Register. 


3.2.1.1 MFC Logical Partition ID Register (MFC_LPID) 


The MFC_LPID Register contains a value that identifies the partition to which an SPE is assigned. Only five 
bits of the LPID are implemented. 















































Register Short Name MFC_LPID Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400008’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
Reserved 
is > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved NI LPID 
à a 4y y 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55/56 57 58/59 60 61 62 63 



































Bits Field Name Description 
| 0:55 | Reserved |Bits are not implemented; all bits read back zero. sss 
56:58 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 
59:63 LPID Logical partition ID. 
Synergistic Processor Element MMIO Registers Version 1.5 


Page 52 of 357 April 2, 2007 


SONY 


SONY “> Registers 


SAMMI © 


Cell Broadband Engine 
3.2.1.2 SPU Identification Register (SPU_ID) 


The SPU_ID Register is a read-only register that distinguishes a particular SPU from other SPUs in the 
system. This register is accessible from the PPE using a load doubleword (Id) instruction. Read access to the 
SPU_ID Register from the PPE is privileged, and access to this register from the SPU is not provided. There 
is one SPU_ID Register for each SPU in the Cell Broadband Engine. 


For additional information, see the Cell Broadband Engine Architecture document. 

























































































Register Short Name SPU_ID Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x‘400010’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR x‘00000000_O00000NU’ Value During POR Set By Bits 56-59 set by configuration 
(N = Node_ID, U = Unit_ID) ring 
Bits 60-63 hardwired per SPE on 
chip 
Specification Type CBEA architected register Unit MFC 
Reserved 
4 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
NI Node_ID Unit_ID 
4 vv vv 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55/56 57 58 59/60 61 62 63 
Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
32:55 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
i bits read back zero. 
. A 4-bit number that identifies the Node ID. This is set in the configuration ring, SPU/SBI[204:207] 
209 Node ID per SPE on chip. 
60:63 Unit_ID A 4-bit hardwired number that identifies the Unit ID in the bus. 
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3.2.2 Interrupt Registers 


There are interrupt mask and interrupt status registers in each MFC: one for each class of interrupt (error, 
translation, application). The interrupt registers allow privileged software to select which MFC and SPU 
events are allowed to generate an external interrupt to the PPE. Each bit of the mask registers has a corre- 
sponding status bit. The mask register determines which bits are reported in the status register. See the Cell 
Broadband Engine Architecture document for more information about these registers. 


3.2.2.1 Class 0 Interrupt Mask Register (INT_Mask_class0) 



































Register Short Name INT_Mask_classO Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400100’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 

NI MF 


4 4 y4 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30/31 
Reserved Se C A 


M 4y y 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60/61 |62|63 












































Bits Field Name Description 








NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


990 bits read back zero. 





Enable for MFC_FIR interrupt 





31 MF 0 Interrupt disabled 
1 Interrupt enabled 
32:60 Reserved Bits are not implemented; all bits read back zero. 





Enable for SPU error interrupt 





61 Se 0 Interrupt disabled 

1 Interrupt enabled 

Enable for invalid direct memory access (DMA) command interrupt 
62 C (0) Interrupt disabled 

1 Interrupt enabled 





Enable for MFC DMA alignment interrupt 

















63 A (0) Interrupt disabled 
1 Interrupt enabled 
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3.2.2.2 Class 2 Interrupt Mask Register (INT_Mask_class2) 











































































































Register Short Name INT_Mask_class2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400110’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
NI 
M 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved B T HSM 
4 tty? 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59/60] 61/62/63 
Bits Field Name Description 
0:31 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
i bits read back zero. 
32:58 Reserved Bits are not implemented; all bits read back zero. 
Enable for SPU Mailbox threshold interrupt 
59 B (0) Interrupt disabled 
1 Interrupt enabled 
Enable for Tag group completion 
60 T 0 Interrupt disabled 
1 Interrupt enabled 
Enable for SPU Halt instruction trap 
61 H 0 Interrupt disabled 
1 Interrupt enabled 
Enable for SPU Stop-and-signal instruction trap 
62 S (0) Interrupt disabled 
1 Interrupt enabled 
Enable for Mailbox interrupt 
63 M 0 Interrupt disabled 
1 Interrupt enabled 
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3.2.2.3 Class 0 Interrupt Status Register (INT_Stat_class0) 









































Register Short Name INT_Stat_classO Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400140’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
NI MF 

M vy 
0 12 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30/31 














y vvyvy 


Reserved Se C A 








32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60] 61/62/63 




















Bits 


Field Name 


Description 








0:30 


NI 


Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 





31 


32:60 


MF 


Reserved 


Status for MFC_FIR interrupt. The invalid DMA command interrupt bit [62], DMA alignment interrupt 
bit [63], and five hang livelock indication conditions defined in the MFC_FIR do not generate an 
INT_Stat_class0[31] class 0 interrupt. 


0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 


All bits read back zero. 





61 


Se 


Status for SPU error interrupt. If there are invalid SPU instructions in SPU_Status[26] and if these 
interrupts are enabled in SPU_ERR_Mask[63], then this bit (INT_Stat_classO[61] goes to ‘1’. Also 
for uncorrectable ECC errors. Status is in SPU_ECC_Stat[62]; control is in SPU_ECC_Cnitl[62]. 


0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 
Note: This implementation differs from the Cell Broadband Engine Architecture. 





62 


Status for invalid DMA command interrupt 
0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 





63 








Status for DMA alignment interrupt 
0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 
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3.2.2.4 Class 2 Interrupt Status Register (INT_Stat_class2) 


















































Register Short Name INT_Stat_class2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400150’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
NI 

M 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 

Reserved B T HSM 


y Vy yy yvy 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59/60] 61 | 62/63 
























































Bits Field Name Description 

0:31 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 

Í bits read back zero. 

32:58 Reserved All bits read back zero. 

Status for SPU Mailbox threshold interrupt 

59 B 0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 
Status for DMA Tag group complete interrupt 

60 T 0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 
Status for SPU Halt instruction trap 

61 H 0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 
Note: This implementation differs from the Cell Broadband Engine Architecture. 
Status for SPU Stop-and-signal instruction trap 

62 S 0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type. 
Status for Mailbox interrupt 

63 M 0 Interrupt not pending for corresponding interrupt type 
1 Interrupt pending for corresponding interrupt type 
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For each class of interrupt, only the most significant 4 bits of the priority field are implemented. See the Cell 
Broadband Engine Architecture document for more information about this register. 











BE_MMIO_Base 


Register Short Name INT_Route Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400180’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 





















































Specification Type CBEA architected register Unit MFC 

Class0_priority NI Class0_destination Class1_priority NI Class1_destination 

M viv viv vy YY 4 y 4 
0 1 2 3/4 5 6 7/8 9 10 11 12 13 14 15/16 17 18 19|20 21 22 23|24 25 26 27 28 29 30 31 
Class2_priority NI Class2_destination Reserved 



























































32 33 34 35/36 37 38 39/40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
. sia Priority for a class 0 interrupt. This priority corresponds to the upper 4 bits of class priority in the Cell 
Os Class0_priority Broadband Engine Architecture document. 
4:7 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
: bits read back zero. 
8:15 ClassO_destination Destination ID for a class 0 interrupt (upper 4 bits = Node ID; lower 4 bits = Unit ID). 
16:19 Class1_priority Priority for a class 1 interrupt. 
À Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
20:23 NI $ 
bits read back zero. 
24:31 Class1_destination | Destination ID for a class 1 interrupt (upper 4 bits = Node ID, lower 4 bits = Unit ID). 
32:35 Class2_priority Priority for a class 2 interrupt. 
36:39 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
, bits read back zero. 
40:47 Class2_destination | Destination ID for a class 2 interrupt (upper 4 bits = Node ID, lower 4 bits = Unit ID). 
48:63 Reserved Bits are not implemented; all bits read back zero. 
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3.2.3 Atomic Unit Control Registers 


These registers control the atomic unit. See the Cell Broadband Engine Architecture document for informa- 
tion about these registers. 


3.2.3.1 Resource Allocation Group ID (RA_Group_ID) 


The RA_Group_ID is a 2-bit register. 
































Register Short Name RA_Group_ID Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400280’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 

Reserved 


012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 















































Reserved RAID 
Š t yy} 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61/62 63 
Bits Field Name Description 
0:61 Reserved Bits are not implemented; all bits read back zero. 
62:63 RAID Two-bit Resource Allocation ID. 
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3.2.3.2 Resource Allocation Enable Register (RA_Enable) 


The RA_Enable Register allows you to override resource allocation. Resource allocation is enabled only 
when both bits [62] and [63] are ‘1’. 


















































Register Short Name RA_Enable Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400288’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero except Value During POR Set By |Scan initialization during POR 
Bit 62 set by configuration ring Bit 62 set by configuration ring 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
J > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved C M 
ý Vy 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 | 62/63 






































Bits Field Name Description 
0:61 Reserved Bits are not implemented; all bits read back zero. 
Resource Allocation Override bit. Read only. Resource Allocation Override is set in the configura- 
E c tion ring, and this field enables a read of that configuration-ring setting. 
6 0 No read of Resource Allocation Override setting in the configuration ring 
1 Read of Resource Allocation Override setting in the configuration ring 
Resource Allocation Enable bit. Resource allocation is enabled only when both the C bit and the M 
bit are set to ‘1’. 
63 M i : 
0 Resource allocation disabled. 
1 Resource allocation is enabled if the C bit is also set to ‘1’. 
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3.2.4 MFC Fault Isolation, Error Mask, Checkstop Enable Registers 


The MFC Fault Isolation Registers (MFC_FIR) are defined in this section. These registers are part of the 
SPE. 


Note: A ‘1’ written to any bit in the MFC_FIR_Reset Register clears the corresponding bit in the MFC_FIR 
Register. FIR registers in other units write a ‘0’ to the FIR_Reset Register to clear the corresponding FIR bit. 


Register Short Name Register Name 














MFC_FIR MFC Fault Isolation Register 
MFC_FIR_Set MFC Fault Isolation Register Set 
MFC_FIR_Reset MFC Fault Isolation Register Reset 
MFC_FIR_Err MFC Fault Isolation Register Error Mask 





MFC_FIR_Err_Set 
MFC_FIR_Err_Reset 
MFC_FIR_ChkStpEnbl 


MFC Fault Isolation Register Error Mask Set 


MFC Fault Isolation Register Error Mask Reset 





MFC Fault Isolation Register Checkstop Enable 











BE_MMIO_Base 


Register Short Name See table above Privilege Type Privilege 1 
Access Type See table below Width 64 bits 
Hex Offset From See table below Memory Map Area SPE Privilege 1 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 























MFC_FIR_Err_Set 


SPEn: x‘4003A0' + (x‘02000’ x 
n) 


MMIO Write Only 


Specification Type Implementation-specific register | Unit SBI 

Register Short Name BE Mio Gace Access Type FIR Function 
MFC_FIR SPEn: x‘400380’ + (x‘02000’ x n) MMIO Read Only FIR Read 
MFC_FIR_Set SPEn: x‘400388’ + (x‘02000’ x n) MMIO Write Only FIR Set 
MFC_FIR_Reset SPEn: x‘400390’ + (x‘02000’ x n) MMIO Write Only FIR Reset 
MFC_FIR_Err SPEn: x‘400398’ + (x‘02000’ x n) MMIO Read Only Error Mask Read 


Error Mask Set 





MFC_FIR_Err_Reset 


SPEn: x‘4003A8’ + (x‘02000’ x 
n) 


MMIO Write Only 


Error Mask Reset 





MFC_FIR_ChkStpEnbl 








SPEn: x'4003B0’ + (x‘02000’ x 
n) 





MMIO Read/Write 





Checkstop Enable 
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Reserved 
i > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
% 
O 
x $ e E 
oO =, 
3 % 8 8 3 
2 o 2 $ g o 2 
= = a e Ẹ $32 o £ 
5 9 2 3 = =“ 2 ao ezen £ = 
J! e See E E n Je 
g Sr l oc So 5 kej 5 5 
df 25H SPR FSHGeEZES ESS 
ao 9 6 8 oe 6 Se PP eo oe oe Be 2 o 
OF eS SSG dG BFR TOCOHK EE s B =, 
else gaae eee cee Cee eee 
Reserved HhHRr ARO n DCBOAnH0fe£eteetcectcteetetcetcee 
< 
tyst 2 syss 2 A A 2 2 A ZZ 
32 33 34 35 36 37 38 39 40 41 42/43) 44 | 45 | 46| 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 
Recommended Settings 
Bits Field Name Description Eror iask Checkstop 
Enable 
0:42 Reserved Bits are not implemented; all bits read back zero. NA NA 
SLB parity error is detected. When an SLB parity error is detected, a class 
0 interrupt (INT_Stat_class0) is generated. The DMA command that 
causes the parity error is suspended in the MFC command queues until 
ae SMM_SLB_par_err either a software restart is issued to clear the command issue suspension ° 0 
state or a DMA purge is issued to reinitialize the DMA machine to the 
default condition. 
Translation lookaside buffer (TLB) parity error is detected. When a TLB 
parity error is detected, a class 0 interrupt (INT_Stat_class0) is generated. 
The DMA command that causes the parity error is suspended in the MFC 
G SMM_TLB_par_err command queues until either a software restart is issued to clear the com- a o 
mand issue suspension state or a DMA purge is issued to reinitialize the 
DMA machine to the default condition. 
45 Reserved Bits are not implemented; all bits read back zero. 0 0 
A null combined response was received, therefore the DMA bus request 
hit an address hole. The synergistic bus interface (SBI) records the MFC 
command queues entry index (the first 5 bits of the DMAC tag are 
recorded in the MFC_CMDQ_Err_ID Register). The SBI does not send a 
46 DMAC_addr_hole completion reply back to the DMAC. 0 0 
To clear this error, the software sends a DMA purge to reinitialize the 
DMA state machine. The SBI resets the state machine of the DMA bus 
request that caused the error. The SBI stops issuing any EIB commands 
until this FIR bit is reset. 
This condition may be caused by excessive retries to the same DMA bus 
request. This condition does not generate a class 0 interrupt. Instead, it 
causes the system to enter quiescent mode to resolve the livelock condi- 
47 DMA_bus_request_livel tion. 0 0 
ock Five bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 
When active, the SBI_rec_DERR bit indicates that the SBI received a 
DERR during a snoop write data phase. The SBI records the write 
a8 SBl_recç_DERR address in the MFC_SBI_Derr_Addr Register. Even though this bit is set, 0 9 
the data is still stored to the destination in the SPE. 
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Bits 


Field Name 


Description 


Recommended Settings 





Checkstop 


Error Mask Enable 








49 


DMAC_align_err 


DMA alignment error conditions: 

e Transfer size: > 16 KB; size neither partial nor quadword; sndsig 
size not 4 bytes; partial check for effective address failed. 

e List transfer size: > 2 K list elements; bits [13:15] are nonzero. 

e Local store address: local store address (LSA) bits [28:31] are not 
equal to the effective address; bits [60:63] for put, get, or sndsig are 
not all zeros for quadword transfers. 

e List address: Lower 3 bits are nonzero. 

The class 0 interrupt is reported, and the MFC command queue index is 
logged in the MFC_CER Register. A ‘1’ value is written to the error-bit 
field of the error entry in the MFC command queues. The DMA suspend 
sequence is started by the DMA control state machine. 
DMAC_align_err is blocked for DMA commands that produce 
DMAC_err_cond. 





50 


DMAC_cmd_err 


DMA command error conditions: 
e Anatomic command is received while one is still pending in the 
queue. 
e MFC proxy command queue side: list or atomic commands present. 
e MFC SPU command queue side: start modifier present. 
e Upper 8 bits of opcode are not all zero. 
e Invalid opcode. 
e Transfer tag bits [0:10] are nonzero. 
e An interrupt is reported. 


The class 0 interrupt is reported and the MFC command queue index is 
logged in the MFC_CER Register. A ‘1’ value is written to the error-bit 
field of the error entry in the MFC command queue. The DMA-suspend 
sequence is started by the DMA control state machine. 





51 


52 


SBI_get_DERR 


Reserved 


The SBI records the MFC command queue entry index in the 
MFC_CMDQ_Err_ID Register. The SBI does not send the completion 
reply back to the DMAC. (To clear this error, the software sends a DMA 
purge to reinitialize the DMA state machine.) The SBI resets the state 
machine of the DMA get bus request that caused the error. The SBI stops 
issuing any EIB commands until this FIR bit is reset. 


Bit is not implemented; bit reads back zero. 





53 


ATO_PTE_addr_hole 


The atomic (ATO) Page Table Entry Group (PTEG) bus request hit an 
address hole. The ATO read and claim (RC) machine freezes until soft- 
ware resets this FIR bit. To clear this error, the software sends a DMA 
purge to reinitialize the DMA state machine. The FIR bit reset reinitializes 
the synergistic memory management (SMM) page table entry (PTE) 
tablewalk state machine. 





54 


ATO_PTE_bus_request 
_livelock 


The RC machine hangs while servicing a PTE request. This condition 
does not cause a checkstop; instead, it causes the system to enter quies- 
cent mode to resolve the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





55 


ATO_PTE_DERR 


The ATO PTEG bus request detected a DERR. The ATO RC machine 
freezes until the software resets this FIR bit. Software should only set this 
FIR bit to be checkstop enabled. 





56 








ATO_CO_addr_hole 





The ATO castout machine (CO) hit an address hole. After the CO 
machine detects an address hole, it may pulse this signal to SBI again 
later when ATO global combined response (GRESP) is activated. The 
ATO CO machine freezes until software resets this FIR bit. Software 
should only set this FIR bit to be checkstop enabled. 
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Bits 


Field Name 


Description 


Recommended Settings 





Checkstop 


Error Mask Enable 








57 


ATO_CO_request_livel 
ock 


The ATO castout machine detects a hang at either the command phase or 
the data phase. The CO retry count latch can be used to distinguish 
between a bus hang or a retry hang. This condition does not cause a 
checkstop; instead, it causes the system to enter the quiescent mode to 
resolve the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





58 


ATO_RC_addr_hole 


An ATO RC machine bus request hit an address hole. The ATO RC 
machine freezes until software resets this FIR bit. The ATO sends the 
hang signal to suspend the DMA operation. Software should only set this 
FIR bit to be checkstop enabled. 





59 


ATO_RC_request_livel 
ock 


The ATO RC machine detects a hang either at the command phase or at 
the data phase. The RC retry count latch can be used to distinguish 
between a bus hang or a retry hang. This condition does not cause check- 
stop; instead, it causes the system to enter the quiescent mode to resolve 
the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





60 


ATO_RC_DERR 


An ATO RC machine bus request received a DERR. (The data can be 
sourced from the intervened cache, local store (LS), or the system mem- 
ory.) The cache state is updated at the time of this error. The ATO RC 
machine freezes until the software resets this FIR bit. The ATO sends a 
hang signal to suspend DMA operation. The state of the frozen RC 
machine can be scanned to tell the DERR source: cache intervention, LS, 
or the system memory. Software should only set this FIR bit to be check- 
stop enabled. 





61 


ATO_snp_addr_hole 


An ATO snoop hit an address hole. The ATO snoop machine freezes until 
the software resets this FIR bit. Software should only set this FIR bit to be 
checkstop enabled. 





62 


ATO_snp_push_liveloc 
k 


An ATO snoop push hang was detected. The ATO snoop machine 
detected a hang on the bus because either the combined response was 
not received or the data phase cannot be completed. This condition does 
not cause a checkstop; instead, it causes the system to enter the quies- 
cent mode to resolve the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





63 








ATO_fl_coll 





ATO flush collision. The ATO detects a DMA or SMM request while the 
ATO flush is active. Software is guaranteed to prevent this error. Software 
should only set this FIR bit to be checkstop-enabled. 
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3.2.5 Miscellaneous Registers 


The following registers are used with the FIR registers. 


3.2.5.1 MFC SBI Data Error Address Register (MFC_SBI_Derr_Addr) 


This register captures the destination address (as a slave device) when the SPE receives data that has an 
error (DERR = ‘1’ on the EIB) and the error is recorded in MFC_FIR[48]. 




































































Register Short Name MFC_SBI_Derr_Addr Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x'4003B8’ + (x‘02000’x Memory Map Area SPE Privilege 1 
BE_MMIO_Base n) 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit SPU 
Reserved 
J > 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
uj 
Q 
= 
= 
Reserved n Err_Addr 
4 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44|45|46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:44 Reserved Bits are not implemented; all bits read back zero. 
Local store or MMIO error 
45 LS_MMIO_Err (0) An LS write access caused the error. 
1 An MMIO write access caused the error. 





Error Address 

If bit [45] equals ‘0’, bits [46:63] capture the LS write address. 

If bit [45] equals ‘1’ and bit [46] equals ‘1’, the address is from a Privilege 1 MMIO write operation. 
46:63 Err_Addr If bit [45] equals ‘1’ and bit [47] equals ‘1’, the address is from a Privilege 2 MMIO write operation. 


If bit [45] equals ‘1’ and bit [48] equals ‘1’, the address is from a Problem State MMIO write opera- 
tion. 


If bit [45] equals ‘1’, then bits [49:63] capture the real address [25:39] of the MMIO write operation. 
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This register saves the MFC command queue entry index number that caused a DMA bus transaction 
request error. If multiple errors occur (as recorded in MFC_FIR bits[46] [47] [51]), only the first error is 
recorded. After the FIR bit corresponding to the error is reset, a new value can be written to this register. 











BE_MMIO_Base 


n) 


Register Short Name MFC_CMDQ_Err_ID Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x'4003C0’ + (x‘02000’ x |Memory Map Area SPE Privilege 1 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 






























































Specification Type Implementation-specific register | Unit SPU 
Reserved 
> 
M 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
x x 
oO (3) 
xe] ne} 
= = 
| | 
ie} ie} 
Q Q 
= = 
ral 9; 
E $ 
Reserved = = 
< 
4 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59/60 61 62 63 
Bits Field Name Description 
0:58 Reserved Bits are not implemented; all bits read back zero. 
MFC command queue index 
59 MFC_CMDQ_Index1 |0 MFC proxy command queue index 
1 MFC SPU command queue index 
. Points to the command queue entry that caused an SBI bus transaction request error. When the 
60:63 | MFC_CMD@_Index2 | MFC_CMDQ_Index1[59] field is set to ‘0’, this MFC_CMDQ_Index2[60:63] field is also set to ‘0’. 
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3.2.6 MFC Fault Isolation, Error Mask, Checkstop Enable Registers 
The MFC Fault Isolation Registers (MFC_FIR) are defined in this section. This register is part of the SPE. 


Note: A ‘1’ written to any bit in the MFC_FIR_Reset Register clears the corresponding bit in the MFC_FIR 
Register. FIR registers in other units write a ‘0’ to the FIR_Reset Register to clear the corresponding FIR bit. 





Register Short Name 


Register Name 








MFC_FIR 


MFC Fault Isolation Register 











MFC_FIR_Set MFC Fault Isolation Register Set 
MFC_FIR_Reset MFC Fault Isolation Register Reset 
MFC_FIR_Err MFC Fault Isolation Register Error Mask 





MFC_FIR_Err_Set 


MFC Fault Isolation Register Error Mask Set 





MFC_FIR_Err_Reset 


MFC Fault Isolation Register Error Mask Reset 





MFC_FIR_ChkStpEnbl 


MFC Fault Isolation Register Checkstop Enable 














BE_MMIO_Base 


Register Short Name See table above Privilege Type Privilege 1 
Access Type See table below Width 64 bits 
Hex Offset From See table below Memory Map Area SPE Privilege 1 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 




















Specification Type Implementation-specific register | Unit SBI 

Register Short Name Sec eae Access Type FIR Function 
MFC_FIR SPEn: x‘400380’ + (x‘02000’ x n) MMIO Read Only FIR Read 
MFC_FIR_Set SPEn: x‘400388’ + (x‘02000’ x n) MMIO Write Only FIR Set 
MFC_FIR_Reset SPEn: x‘400390’ + (x‘02000’ x n) MMIO Write Only FIR Reset 
MFC_FIR_Err SPEn: x‘400398’ + (x‘02000’ x n) MMIO Read Only Error Mask Read 





MFC_FIR_Err_Set 


MFC_FIR_Err_Reset 


SPEn: x‘4003A0' + (x‘02000’ x 
n) 


SPEn: x'4003A8’ + (x‘02000’ x 
n) 


MMIO Write Only 


MMIO Write Only 


Error Mask Set 


Error Mask Reset 





MFC_FIR_ChkStpEnbl 








SPEn: x‘4003B0’ + (x‘02000’ x 
n) 





MMIO Read/Write 





Checkstop Enable 
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Reserved 
i > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
% 
O 
x $ e E 
oO =, 
3 % 8 8 3 
2 o 2 $ g o 2 
= = a e Ẹ $32 o £ 
5 9 2 3 = =“ 2 ao ezen £ = 
J! e See E E n Je 
g Sr l oc So 5 kej 5 5 
df 25H SPR FSHGeEZES ESS 
ao 9 6 8 oe 6 Se PP eo oe oe Be 2 o 
OF eS SSG dG BFR TOCOHK EE s B =, 
else gaae eee cee Cee eee 
Reserved HhHRr ARO n DCBOAnH0fe£eteetcectcteetetcetcee 
< 
tyst 2 syss 2 A A 2 2 A ZZ 
32 33 34 35 36 37 38 39 40 41 42/43) 44 | 45 | 46| 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 
Recommended Settings 
Bits Field Name Description Eror iask Checkstop 
Enable 
0:42 Reserved Bits are not implemented; all bits read back zero. NA NA 
SLB parity error is detected. When an SLB parity error is detected, a class 
0 interrupt (INT_Stat_class0) is generated. The DMA command that 
causes the parity error is suspended in the MFC command queues until 
ae SMM_SLB_par_err either a software restart is issued to clear the command issue suspension ° 0 
state or a DMA purge is issued to reinitialize the DMA machine to the 
default condition. 
Translation lookaside buffer (TLB) parity error is detected. When a TLB 
parity error is detected, a class 0 interrupt (INT_Stat_class0) is generated. 
The DMA command that causes the parity error is suspended in the MFC 
G SMM_TLB_par_err command queues until either a software restart is issued to clear the com- a o 
mand issue suspension state or a DMA purge is issued to reinitialize the 
DMA machine to the default condition. 
45 Reserved Bits are not implemented; all bits read back zero. 0 0 
A null combined response was received, therefore the DMA bus request 
hit an address hole. The synergistic bus interface (SBI) records the MFC 
command queues entry index (the first 5 bits of the DMAC tag are 
recorded in the MFC_CMDQ_Err_ID Register). The SBI does not send a 
46 DMAC_addr_hole completion reply back to the DMAC. 0 0 
To clear this error, the software sends a DMA purge to reinitialize the 
DMA state machine. The SBI resets the state machine of the DMA bus 
request that caused the error. The SBI stops issuing any EIB commands 
until this FIR bit is reset. 
This condition may be caused by excessive retries to the same DMA bus 
request. This condition does not generate a class 0 interrupt. Instead, it 
causes the system to enter quiescent mode to resolve the livelock condi- 
47 DMA_bus_request_livel tion. 0 0 
ock Five bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 
When active, the SBI_rec_DERR bit indicates that the SBI received a 
DERR during a snoop write data phase. The SBI records the write 
a8 SBl_recç_DERR address in the MFC_SBI_Derr_Addr Register. Even though this bit is set, 0 9 
the data is still stored to the destination in the SPE. 
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Bits 


Field Name 


Description 


Recommended Settings 





Checkstop 


Error Mask Enable 








49 


DMAC_align_err 


DMA alignment error conditions: 

e Transfer size: > 16 KB; size neither partial nor quadword; sndsig 
size not 4 bytes; partial check for effective address failed. 

e List transfer size: > 2 K list elements; bits [13:15] are nonzero. 

e Local store address: local store address (LSA) bits [28:31] are not 
equal to the effective address; bits [60:63] for put, get, or sndsig are 
not all zeros for quadword transfers. 

e List address: Lower 3 bits are nonzero. 

The class 0 interrupt is reported, and the MFC command queue index is 
logged in the MFC_CER Register. A ‘1’ value is written to the error-bit 
field of the error entry in the MFC command queues. The DMA suspend 
sequence is started by the DMA control state machine. 
DMAC_align_err is blocked for DMA commands that produce 
DMAC_err_cond. 





50 


DMAC_cmd_err 


DMA command error conditions: 
e Anatomic command is received while one is still pending in the 
queue. 
e MFC proxy command queue side: list or atomic commands present. 
e MFC SPU command queue side: start modifier present. 
e Upper 8 bits of opcode are not all zero. 
e Invalid opcode. 
e Transfer tag bits [0:10] are nonzero. 
e An interrupt is reported. 


The class 0 interrupt is reported and the MFC command queue index is 
logged in the MFC_CER Register. A ‘1’ value is written to the error-bit 
field of the error entry in the MFC command queue. The DMA-suspend 
sequence is started by the DMA control state machine. 





51 


52 


SBI_get_DERR 


Reserved 


The SBI records the MFC command queue entry index in the 
MFC_CMDQ_Err_ID Register. The SBI does not send the completion 
reply back to the DMAC. (To clear this error, the software sends a DMA 
purge to reinitialize the DMA state machine.) The SBI resets the state 
machine of the DMA get bus request that caused the error. The SBI stops 
issuing any EIB commands until this FIR bit is reset. 


Bit is not implemented; bit reads back zero. 





53 


ATO_PTE_addr_hole 


The atomic (ATO) Page Table Entry Group (PTEG) bus request hit an 
address hole. The ATO read and claim (RC) machine freezes until soft- 
ware resets this FIR bit. To clear this error, the software sends a DMA 
purge to reinitialize the DMA state machine. The FIR bit reset reinitializes 
the synergistic memory management (SMM) page table entry (PTE) 
tablewalk state machine. 





54 


ATO_PTE_bus_request 
_livelock 


The RC machine hangs while servicing a PTE request. This condition 
does not cause a checkstop; instead, it causes the system to enter quies- 
cent mode to resolve the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





55 


ATO_PTE_DERR 


The ATO PTEG bus request detected a DERR. The ATO RC machine 
freezes until the software resets this FIR bit. Software should only set this 
FIR bit to be checkstop enabled. 





56 








ATO_CO_addr_hole 





The ATO castout machine (CO) hit an address hole. After the CO 
machine detects an address hole, it may pulse this signal to SBI again 
later when ATO global combined response (GRESP) is activated. The 
ATO CO machine freezes until software resets this FIR bit. Software 
should only set this FIR bit to be checkstop enabled. 
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Bits 


Field Name 


Description 


Recommended Settings 





Checkstop 


Error Mask Enable 








57 


ATO_CO_request_livel 
ock 


The ATO castout machine detects a hang at either the command phase or 
the data phase. The CO retry count latch can be used to distinguish 
between a bus hang or a retry hang. This condition does not cause a 
checkstop; instead, it causes the system to enter the quiescent mode to 
resolve the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





58 


ATO_RC_addr_hole 


An ATO RC machine bus request hit an address hole. The ATO RC 
machine freezes until software resets this FIR bit. The ATO sends the 
hang signal to suspend the DMA operation. Software should only set this 
FIR bit to be checkstop enabled. 





59 


ATO_RC_request_livel 
ock 


The ATO RC machine detects a hang either at the command phase or at 
the data phase. The RC retry count latch can be used to distinguish 
between a bus hang or a retry hang. This condition does not cause check- 
stop; instead, it causes the system to enter the quiescent mode to resolve 
the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





60 


ATO_RC_DERR 


An ATO RC machine bus request received a DERR. (The data can be 
sourced from the intervened cache, local store (LS), or the system mem- 
ory.) The cache state is updated at the time of this error. The ATO RC 
machine freezes until the software resets this FIR bit. The ATO sends a 
hang signal to suspend DMA operation. The state of the frozen RC 
machine can be scanned to tell the DERR source: cache intervention, LS, 
or the system memory. Software should only set this FIR bit to be check- 
stop enabled. 





61 


ATO_snp_addr_hole 


An ATO snoop hit an address hole. The ATO snoop machine freezes until 
the software resets this FIR bit. Software should only set this FIR bit to be 
checkstop enabled. 





62 


ATO_snp_push_liveloc 
k 


An ATO snoop push hang was detected. The ATO snoop machine 
detected a hang on the bus because either the combined response was 
not received or the data phase cannot be completed. This condition does 
not cause a checkstop; instead, it causes the system to enter the quies- 
cent mode to resolve the livelock condition. 

The 5 bits of the MFC_FIR_Err (bits 47, 54, 57, 59, and 62) are hardwired 
to return ‘1’ for a read operation. There is no effect on these 5 bits for write 
operations. Because they are hardwired to return ‘1’, the corresponding 
checkstop-enable bit cannot be used to enable checkstop. 





63 








ATO_fl_coll 





ATO flush collision. The ATO detects a DMA or SMM request while the 
ATO flush is active. Software is guaranteed to prevent this error. Software 
should only set this FIR bit to be checkstop-enabled. 
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3.2.7 Miscellaneous Registers 


The following registers are used with the FIR registers. 


3.2.7.1 MFC SBI Data Error Address Register (MFC_SBI_Derr_Addr) 


This register captures the destination address (as a slave device) when the SPE receives data that has an 
error (DERR = ‘1’ on the EIB) and the error is recorded in MFC_FIR[48]. 




































































Register Short Name MFC_SBI_Derr_Addr Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x'4003B8’ + (x‘02000’x Memory Map Area SPE Privilege 1 
BE_MMIO_Base n) 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit SPU 
Reserved 
J > 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
uj 
Q 
= 
= 
Reserved n Err_Addr 
4 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44|45|46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:44 Reserved Bits are not implemented; all bits read back zero. 
Local store or MMIO error 
45 LS_MMIO_Err (0) An LS write access caused the error. 
1 An MMIO write access caused the error. 





Error Address 

If bit [45] equals ‘0’, bits [46:63] capture the LS write address. 

If bit [45] equals ‘1’ and bit [46] equals ‘1’, the address is from a Privilege 1 MMIO write operation. 
46:63 Err_Addr If bit [45] equals ‘1’ and bit [47] equals ‘1’, the address is from a Privilege 2 MMIO write operation. 


If bit [45] equals ‘1’ and bit [48] equals ‘1’, the address is from a Problem State MMIO write opera- 
tion. 


If bit [45] equals ‘1’, then bits [49:63] capture the real address [25:39] of the MMIO write operation. 
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This register saves the MFC command queue entry index number that caused a DMA bus transaction 
request error. If multiple errors occur (as recorded in MFC_FIR bits[46] [47] [51]), only the first error is 
recorded. After the FIR bit corresponding to the error is reset, a new value can be written to this register. 











Register Short Name MFC_CMDQ_Err_ID Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x'4003C0’ + (x‘02000’ x |Memory Map Area SPE Privilege 1 


BE_MMIO_Base 


n) 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 






























































Specification Type Implementation-specific register | Unit SPU 
Reserved 
> 
M 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
x x 
oO (3) 
xe] ne} 
= = 
| | 
ie} ie} 
Q Q 
= = 
ral 9; 
E $ 
Reserved = = 
< 
4 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59/60 61 62 63 
Bits Field Name Description 
0:58 Reserved Bits are not implemented; all bits read back zero. 
MFC command queue index 
59 MFC_CMDQ_Index1 |0 MFC proxy command queue index 
1 MFC SPU command queue index 
. Points to the command queue entry that caused an SBI bus transaction request error. When the 
60:63 | MFC_CMD@_Index2 | MFC_CMDQ_Index1[59] field is set to ‘0’, this MFC_CMDQ_Index2[60:63] field is also set to ‘0’. 
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3.2.8 MFC TLB Management Registers 


These registers support software TLB management. 


3.2.8.1 MFC Storage Description Register (MFC_SDR) 


The MFC_SDR Register contains the hash table origin and size. The functionality is identical to the PPE 
SDR1 Register (see the PowerPC Architecture, Book III for more information). The implemented bits are 
shown below. 






























































Register Short Name MFC_SDR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400400’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 

O 

o 

> 

3 

N 

£ NI HTABORG 

r4 y y á 
01/2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 

HTABORG Reserved HTABSIZE 
< 
vy vy 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45|46 47 48 49 50 51 52 53 54 55 56 57 58/59 60 61 62 63 




















Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
2:21 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


bits read back zero. 





Page-table origin (real address of the page table). The HTABORG field contains the high-order 44 
22:45 HTABORG bits of the 62-bit real address of the page table. The page table is thus constrained to lie on a mini- 

` mum 218-byte (256 KB) boundary. The number of low-order zero bits in HTABORG must be greater 
than or equal to the value in HTABSIZE. 





46:58 Reserved Bits are not implemented; all bits read back zero. 





Encoded size of page table. The HTABSIZE field contains an integer giving the number of bits (in 
59:63 HTABSIZE addition to the minimum of 11 bits) from the hash that are used in the page-table index. This num- 
ber must not exceed 28. 
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3.2.8.2 MFC TLB Index Hint Register (MFC_TLB_Index_Hint) 


This register contains the MFC translation lookaside buffer (TLB) index and congruence class for the most 
likely candidate for replacement when the SMM has a translation miss in the TLB. The index is written for 
both hardware and software tablewalks. Software may use this index as a suggestion or make an index of its 
own. 


The CBE uses the lower 12 bits of this register to index the TLB cache. For the PPE_TLB_Index_Hint 
Register, bits [52:59] contain the TLB congruence class, and bits [60:63] contain the set within the congru- 
ence class. For the SPE (MFC_TLB_Index_Hint Register), bits [54:59] contain the TLB congruence class, 
and bits [60:63] contain the set within the congruence class. 


















































Register Short Name MFC_TLB_Index_Hint Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x‘400500’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 
Reserved NI 
4 Y J > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26/27 28 29 30 31 
NI Index 
< 4 4 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53|54 55 56 57 58 59 60 61 62 63 














Bits Field Name Description 








0:26 Reserved Bits are not implemented; all bits read back zero. 





Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


co Ml bits read back zero. 





[54:59] Selects one of the 64 congruence classes 


[60:63] Selects one of the four entries in the congruence class. These 4 bits decide which entry of 
the congruence class is updated after a tablewalk. After a tablewalk completes and new data from a 
PTE is ready to be written into the TLB, these bits indicate the array selected. 


The SMM hardware writes this register any time there is a TLB miss. Because hardware writes this 
register directly, only valid combinations are possible. 


0000 Does not update a TLB array; causes another tablewalk the next time that address is 
54:63 Index translated 


0001 Selects entry 3 (TLB array 3, the fourth of four entries in the congruence class) 
0010 Selects entry 2 (TLB array 2) 
0100 Selects entry 1 (TLB array 1) 
1000 Selects entry O (TLB array 0) 


All other combinations are not valid. Asserting more than 1 bit writes more than 1 array and corrupts 
the TLB data, causing a multiple hit on the next address translation. 
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3.2.8.3 MFC TLB Index Register (MFC_TLB_Index) 


The MFC_TLB_Index Register points to a TLB entry (virtual page number [VPN] and real page number 
[RPN]) to be read or written by the MMIO. This register must be written before any access to the TLB array. 


The CBE uses the lower 12 bits of the TLB Index Register to index the TLB cache. For the PPE_TLB_Index 
Register, bits [52:59] contain the TLB congruence class, and bits [60:63] contain the set within the congru- 
ence class. For the SPE (MFC_TLB_Index), bits [54:59] contain the TLB congruence class, and bits [60:63] 
contain the set within the congruence class. 












































Register Short Name MFC_TLB_Index Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400508’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 
Reserved LVPN NI 
y t y vy á 
[o 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15/16 17 18 19 20/21 22 23 24 25 26 27 28 29 30 31 
NI Index 
< ye ot 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53|54 55 56 57 58 59 60 61 62 63 








Bits Field Name Description 





0:15 Reserved Bits are not implemented; all bits read back zero. 





These lower virtual page number (LVPN) bits [16:20] correspond to the virtual address bits [57:61]. 
This field is updated during a VPN read. When writing a TLB entry by using the MMIO, the LVPN 
16:20 LVPN data is concatenated with the abbreviated virtual page number (AVPN) data from the 
MFC_TLB_VPN Register. The LVPN data is the least significant portion of the abbreviated page 
index in the implemented AVPN field. 





21:26 NI This portion of the LVPN field is not implemented in the CBE, but these bits are defined in the Cell 
, Broadband Engine Architecture. All bits read back zero. 





27:53 NI This portion of the Index field is not implemented in the CBE, but these bits are defined in the Cell 
Broadband Engine Architecture. All bits read back zero. 





[54:59] Selects one of the 64 congruence classes. 


54:63 Index [60:63] Selects one of the four entries in the congruence class. (One-hot decoding. See 
MFC_TLB_Index_Hint[54:63] for more information.) 
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3.2.8.4 MFC TLB Virtual Page Number Register (MFC_TLB_VPN) 


The MFC_TLB_VPN Register contains the virtual page number used in translating the effective address to a 
real address. 


To write a new entry in the TLB by the MMIO, the MFC_TLB_Index Register should be written first. The index 
points to the target congruence class and entry. The RPN data should be written after the index, followed by 
a write to the VPN register. RPN and VPN write data is collected, and then the entire TLB entry is written at 
once. Any write to the VPN register sets off a write to the TLB array, whether the index and RPN were previ- 
ously written or not. 


To read the MFC_TLB_VPN data, first write the MFC_TLB_Index to specify the entry. The VPN read 
command retrieves data from the TLB array entry specified by the MFC_TLB_Index value. 


















































Register Short Name MFC_TLB_VPN Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400510’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 
NI AVPN 
> 
M 4 4 
012 3 4 5 6 7 8 9 10 11 12 13 14/15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
AVPN NI L N V 
‘ Vy tyy 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56/57 58 59 60/61 |62|63 
























































Bits Field Name Description 
0:14 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
' bits read back zero. 
15:56 AVPN Abbreviated virtual page number. 
? Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
57:60 NI ; 
bits read back zero. 
Large page. 
61 L 0 4 KB page 
1 Large page 
62 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 
Valid bit. 
63 Vv 0 Invalid 
1 Valid 
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3.2.8.5 MFC TLB Real Page Number Register (MFC_TLB_RPN) 


The MFC_TLB_RPN Register contains the real page number used in translating the effective address to a 
real address. 


To write a new entry in the TLB by the MMIO, the MFC_TLB_Index Register should be written first. The index 
points to the target congruence class and entry. The RPN data should be written after the index, followed by 
a write to the VPN register. RPN and VPN write data is collected, and then the entire TLB entry is written at 
once. Any write to the VPN register sets off a write to the TLB array, whether the index and RPN were previ- 
ously written or not. 


To read the MFC_TLB_RPN data, first write the MFC_TLB_Index to specify the entry. The RPN read 
command retrieves data from the TLB array entry specified by the MFC_TLB_Index value. 























































































































Register Short Name MFC_TLB_RPN Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400518’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR x‘00000000_000001 10’ Value During POR Set By Scan initialization during POR 
Bits 55, 59 hardwired 
Specification Type CBEA architected register Unit SMM 
xo} 
o 
qg 
E=] o 
> n 
ee NI ARPN 
> 
44 y vy 
0/1/12 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
? 
2 
2 
ARPN LP € ACR CN | MGN PP 
< 
vy nn 2 2 a a; 
32 33 34 35 36 37 38 39 40 41 42 43/44 45 46 47 48 49 50 51/52 53/54] 55] 56 | 57 | 58/59/60) 61/62 63 
Bits Field Name Description 
0 Rsvd_l Reserved. Latch bit is implemented; value read is the value written. 
1 Reserved Bits are not implemented; all bits read back zero. 
2:21 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


bits read back zero. 





22:43 ARPN Abbreviated real page number. 





Size selector for a large virtual page. 


This field supports up to eight concurrent large page sizes. The MFC supports three large page 
sizes in total, but only two concurrently. The two concurrent sizes are encoded in the SMM_HID 
register. This LP field selects one of those two page sizes for the intended TLB entry. 


The least significant bit of this field is used as part of the comparison to the virtual address on a TLB 

















44:51 LP lookup. Depending on the page size, some bits of this field may be concatenated with the ARPN 
field to form the RPN on a successful lookup. 
aaaaaaaa MFC_TLB_VPN[L] = ‘0’ 
aaaaaaa0 Large page size one if MFC_TLB_VPN[L] = ‘1’ 
aaaaaa01 Large page size two if MFC_TLB_VPN[L] = ‘1’ 
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Bits Field Name Description 
52:53 Reserved Bits are not implemented; all bits read back zero. 
54 AC Address compare bit. 
55 R Reference bit. This bit is not written into the TLB array because it is assumed to be ‘1’. It is returned 
as ‘1’ during an MMIO RPN read. 
56 C Change bit. 
57 NI This bit is defined in the Cell Broadband Engine Architecture but is not implemented in the CBE. 
58 | Cache-inhibited page bit. 
Memory-coherency storage-control bit. 
This bit is not written into the TLB array because it is assumed to be ‘1’. It is returned as ‘1’ during 
59 M an MMIO RPN read. 
The SBI sends local bus command requests with M = ‘1’. However, the EIB can detect whether it is 
a local (on-chip) address by comparison to the EIB_LBARO and EIB_LBAR1 registers and then 
forcing M = ‘0’. See the EIB Registers section of this document for more information. 
60 Guarded page bit. 
61 No-execute page bit. 
62:63 PP Page protection bits. 
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3.2.8.6 MFC TLB Invalidate Entry Register (MFC_TLB_Invalidate_Entry) 


The MFC_TLB_Invalidate_Entry Register is used to invalidate TLB entries in the MFC. The function of this 
register is similar to the PowerPC tlbie instruction. Access to this register is privileged. 


The MFC_TLB_Invalidate_Entry Register contains a virtual page number (VPN) field and an invalidation 
selector (IS) field. The VPN is used to identify a particular entry to invalidate, and the IS field is used to control 
how selective the invalidate should be. 


This register is not available for the PPE. To invalidate entries in a PPE, the local form of the PowerPC tlbie 
instruction should be used. See the PowerPC Architecture document for details of this instruction. 


Notes: 

e Ifthe VPN is being invalidated to change the protection attributes of a page or to steal the page, a TLB 
invalidate entry command must be issued to invalidate any cache of the effective-to-real address transla- 
tion that may be associated with the TLB entry being invalidated. The IS field in the MFC TLB Invalidate 
Entry Register can only be used to invalidate the cache and does not affect TLB entries. 


e Care must be taken in using this function in TLB-managed environments, because hardware can invali- 
date all TLB entries in the associated congruence class. This can adversely affect TLB set management 
and deterministic response. To avoid this side effect, privileged software can use the TLB index and TLB 
direct-modification functions to locate the specific entry to be invalidated in the congruence class and only 
invalidate the entry that matches. 
























































Register Short Name MFC_TLB_Invalidate_Entry Privilege Type Privilege 1 
Access Type MMIO Write Only Width 64 bits 
Hex Offset From SPEn: x‘400540’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By N/A 
Specification Type CBEA architected register Unit SMM 
IS Reserved NI 
yvy Vy d 
01/2 3 4 5 6 7 8 9 10 11 12 13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
NI VPN LP L LS 
i Vy Vy tyy 





32 33 34 35 36 37 38 39 40 41 42 43/44 45 46 47 48 49 50 51/52 53 54 55 56 57 58 59 60 61 |62|63 




















Bits Field Name Description 








Invalidation selector 


01 The TLB entry is not invalidated. Any lower-level caches of the translation are 
0:1 IS invalidated. 
00, 10, 11 The TLB does a congruence-class invalidate, regardless of logical partition 


identification (LPID) match. 





2:15 Reserved Bits are not implemented; all bits read back zero. 


Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 




















16:49 MI bits read back zero. 
44:51 VPN Virtual page number (index). 
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Bits Field Name Description 
Size selector for a large virtual page. 
This field supports up to eight concurrent large page sizes. The MFC supports three large page 
sizes in total, but only two concurrently. The two concurrent sizes are encoded in the SMM_HID 
register. This LP field selects one of those two pages. Depending on the page size selected, some 
52:61 LP bits in this field can be concatenated with the VPN field to determine which entries are invalidated. 
aaaaaaaa TLB_Invalidate_Entry[L] = ‘0’ 
aaaaaaa0 Large page size one if TLB_Invalidate_Entry[L] = ‘1’ 
aaaaaa01 Large page size two if TLB_Invalidate_Entry[L] = ‘1’ 
Note: Software should set the least significant bit of the LP field to the same value as the LS bit. 
Large Page bit 
The L and LS bits of MFC_TLB_Invalidate_Entry are used in conjunction with the Page Size 
62 L Decode bits in the SMM_HID register to determine the large page size. 
0 Small page (4 KB) 
1 Large pages (64 KB, 1 MB, or 16 MB) 
Large Page Selection 
The L and LS bits of MFC_TLB_Invalidate_Entry are used in conjunction with the Page Size 
Decode bits in the SMM_HID register to determine the large page size. 
63 LS 0 First large page (implementation-dependent size) 
1 Second large page (implementation-dependent size) 
Note: Software should set this bit to the same value as the least significant bit of the LP field for 
compatibility with implementations that only support two large page sizes. 
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3.2.9 Memory Management Register 


3.2.9.1 SMM Hardware Implementation Dependent Register (SMM_HID) 


The hardware implementation dependent (HID) register bit fields contain configuration bits that control many 
essential functions of the SMM. This register should be set before the SMM performs any translations and 
before the arrays are loaded with data. 







































































Register Short Name SMM_HID Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400580’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit SMM 
Q 
g 5 
= 2 Oo 
a5 2585 | 
a Q 1o o _ WwW 
QO axtaqaQ 5 @ 
Prous Iag g 
zxz xF 
me a a Fl 
G89; 9 OE C 
Pg SzDd bhó ee ee Perf_Trc_Trg_Ctrl Reserved 
> 
¥ a en A žżšżšł4żłż š y y 
O 1 2 3/4/)/5)6/7)]8)9)10/11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 
Reserved 


Å—oo M 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 












































Bits Field Name Description 
0:3 Pg_Sz_Dcd Page size decode (HID bits) 
SLB parity generation 
4 SPGEN_Dsbl 0 Enable 
1 Disable 
SLB parity checking 
5 SPCHK_Dsbl 0 Enable 
1 Disable 
This bit controls DMA requests in response to pending TLBIE conditions. 
6 Stall_ DMA_Issue 0 se TLBIE condition stalls the DMAC from issuing new requests to the ATO and SBI 
1 Pending TLBIE condition does not stall new DMA requests 
TLB parity generation 
7 TPGEN_Dsbl 0 Enable 
1 Disable 
TLB parity checking 
8 TPCHK_Dsbl 0 Enable 
1 Disable 
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Bits Field Name Description 
Replacement Management Table (RMT) function 
9 RMT_Dsbl 0 Enable 
1 Disable 
This bit controls the ATO response to a pending TLBIE under livelock conditions. 
0 The ATO does not force completion of a pending TLBIE under livelock conditions (livelock 
0 ATO_ILBIE_Comp set by RC, castout, or PTE fetch). 
1 The ATO forces completion of a pending TLBIE under livelock conditions. 
11:28 Perf_Trc_Trg_Ctrl Performance, trace, and trigger control bits 
29:63 Reserved Bits are not implemented; all bits read back zero. 

















3.2.10 MFC TLB Replacement Management Table Data Register (MFC_TLB_RMT_Data) 


The MFC supports four Replacement Management Table (RMT) entries. The 2 lower bits of the RClassID 
from a DMA command opcode select one of the four RMT table entries. The RMT entries use 4 bits to deter- 
mine which TLB entry to replace within a congruence class during a tablewalk. See the cache replacement 
management facility section of the Cell Broadband Engine Architecture document for more information. 


The SMM implements Replacement Management Table (RMT) functionality in the same manner as the PPE. 





































































































Register Short Name MFC_TLB_RMT_Data Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400710’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 
Reserved 
D > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved RMT_Entry_0 RMT_Entry_1 RMT_Entry_2 RMT_Entry_3 
1 O y O y O Na a O 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47/48 49 50 51/52 53 54 55/56 57 58 59/60 61 62 63 
Bits Field Name Description 
0:47 Reserved Bits are not implemented; all bits read back zero. 
48:51 RMT_Entry_0 RMT Entry 0 set enable bits 
52:55 RMT_Entry_1 RMT Entry 1 set enable bits 
56:59 RMT_Entry_2 RMT Entry 2 set enable bits 
60:63 RMT_Entry_3 RMT Entry 3 set enable bits 
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3.2.11 MFC Command Data-Storage Interrupt (DSI) Registers 


3.2.11.1 MFC Data-Storage Interrupt Pointer Register (MFC_DSIPR) 


The MFC_DSIPR Register contains the index (pointer) to the command in the selected command queue that 
has an MFC data-storage interrupt (DSI) or an MFC data-segment interrupt. The cause of an MFC data- 
storage interrupt is identified in the MFC Data-Storage Interrupt Pointer Register (MFC_DSIPR). 





















































Register Short Name MFC_DSIPR Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x‘400800’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
Reserved 
M 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
ğ 
ge] 
£ 
al 
3 
oO 
=) 
9 
ge] 
Cc 
o 
E 
E 
Q 
9 
rd 
Q NI Z 
y y vy 4 





32/33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59/60 61 62 63 























Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
MFC Command Queue Index 
32 Q 0 MFC proxy command queue index 
1 MFC SPU command queue index 
; Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
33:59 NI i 
bits read back zero. 
Points to the queue entry that caused the data-storage interrupt. The number of bits implemented in 
60:63 MFO Command Quen this field is implementation dependent: 8 bits for the MFC proxy command queue, 16 bits for the 


e_Index MFC SPU command queue. Bit [60] is ‘0’ for the MFC SPU command queue ID. 
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Implementation Note: Only one translation fault can be outstanding. The implementation can either stop all 
command queue processing on the first translation error or continue processing. If processing is continued, 
all ordering rules must be followed (a command must not be processed if it is dependent on a command that 
is waiting for a translation fault to be resolved). The state of the MFC must appear as if the command (or 
partial command) were never issued. This is also the case if a second translation fault occurs. 


3.2.11.2 MFC Local Store Address Compare Register (MFC_LSACR) 


The MFC Local Store Address Compare Register (MFC_LSACR) contains the local store address and local 
store address mask to be used in the MFC local store address compare operation selected by the 
MFC_ACCR Register. Access to the MFC_LSACR is privileged. 


A local store address compare occurs when the local store address accessed is within the range of 


addresses specified by the bit-wise AND of the local store compare address mask (LSCAM) and the local 
storage compare address (LSCA) fields. 
















































































Register Short Name MFC_LSACR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400808’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type CBEA architected register Unit SBI 
Reserved LS_Address_Compare_Mask_LSCAM 
M vv 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13/14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved LS_Address_Compare_Address_LSCA 
4 vy 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45/46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:13 Reserved Bits are not implemented; all bits read back zero. 
: LS_Address_Compare F ; 
14:31 Mask LSCAM The local store address compare mask used in the LS address compare operation 
32:45 Reserved Bits are not implemented; all bits read back zero. 
: LS_Address_Compare : : 
46:63 Address_LSCA The local store compare address used in the LS address compare operation 
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3.2.11.3 MFC Local Store Compare Results Register (MFC_LSCRR) 


The MFC_LSCRR contains the local store address that triggered the compare, as well as the MFC command 
queue index of the DMA command that triggered the compare stop. 


Contents of this register are only valid when a class 1 interrupt occurs with the INT_Mask_class1[LP] bit or 
INT_Mask_class1[LG] bit, or both interrupt status bits set. The MFC_LSCRR[Q] bit indicates whether the 
command was issued from the MFC proxy command queue or the MFC SPU command queue. 


Access to this register should be privileged. The contents of this register become indeterminate once MFC 
operation is resumed. 


A new value is captured and locked into the register by the first qualified compare match. The register is 
unlocked and ready to capture the next value after the register is read or a DMA purge is issued to the 
MFC_CNTL[PC] Register. 





























Register Short Name MFC_LSCRR Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x‘400810’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type CBEA architected register Unit SBI 

Reserved LS_address 


[o 1 2 3 4 5 6 7 8 9 10 11 12 13/14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31| 
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Q Reserved = 
vy 4 4 4 
32 |33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59/60 61 62 63 
Bits Field Name Description 
0:13 Reserved Bits are not implemented; all bits read back zero. 
14:31 LS_address The local store address that triggered the compare match 
MFC command type 
32 Q 0 Compare match is triggered by an MFC proxy command. 
1 Compare match is triggered by an MFC SPU command. 
33:59 Reserved Bits are not implemented; all bits read back zero. 
60:63 MFC_Command_Queu | Points to the MFC command queue entry that triggered the compare match. Bit [60] is always zero 
i e_Index for the MFC proxy command queue index ID. 
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3.2.11.4 MFC Transfer Class ID Register (MFC_TClassID) 
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When slot alternation is enabled, the put command is placed into slot 0 and the get command is placed into 
slot 1. When slot alternation is disabled, the corresponding Transfer Class ID group is always placed in and 


issued from slot 0. 


The outgoing queue size for bus transactions is 16, therefore the total of the values in IQO, IQ1, and IQ2 must 


be clamped to 16. 




























































































Register Short Name MFC_TClassID Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400820” + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR x‘00000000_ 10000000’ Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
> 
M 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
or yN AT 
Reserved 1Q0 Reserved 1Q1 Reserved 1Q2 S S&S J Reseved Oa 
< 
vv 4 4 vv 4 4 vv t444 vv 
32 33 34/35 36 37 38 39/40 41 42/43 44 45 46 47/48 49 50/51 52 53 54 55)56/57/58/59 60 61 62|63 
Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
32:34 Reserved Bits are not implemented; all bits read back zero. 


Issue quota for TClassIDO. Initial value after purge is ‘10000’. 
00000 quota value of 1 

35:39 1Q0 00001 quota value of 1 

00010-10000 quota value of 2-16 

10001-11111 quota value of 16 


40:42 Reserved Bits are not implemented; all bits read back zero. 





Issue quota for TClassID1 

00000 quota value of 1 
43:47 1Q1 00001 quota value of 1 
00010-10000 quota value of 2-16 
10001-11111 quota value of 16 





48:50 Reserved Bits are not implemented; all bits read back zero. 





Issue quota for TClassID2 

00000 quota value of 1 
51:55 1Q2 00001 quota value of 1 
00010-10000 quota value of 2 - 16 
10001-11111 quota value of 16 





Slot alternation 
56 SAO 0 Enabled for TClassIDO 
1 Disabled for TClassIDO 
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Bits Field Name Description 
Slot alternation 
57 SA1 (0) Enabled for TClassID1 
1 Disabled for TClassID1 
Slot alternation 
58 SA2 0 Enabled for TClassID2 
1 Disabled for TClassID2 
59:62 Reserved Bits are not implemented; all bits read back zero. 
TClassID enable bit. Also called the streaming hint enable bit 
63 IDEn 0 Transfer class ID ignored; all transfers default to TClassIDO. 
1 Bus transactions issued round-robin for TClassIDO, TClassID1, and TClassID2. 
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3.2.12 DMAC Unit Performance Monitor Control Register 


3.2.12.1 DMAC Unit Performance Monitor Control Register (DMAC_PMCR) 


SONY 


SONY 


COMPUTER: 
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This register provides controls for selecting and enabling signals for the trigger and event buses and groups 
of signals for the trace bus and performance monitor. 











Register Short Name DMAC_PMCR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘400880’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 


BE_MMIO_Base 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 























































































































Specification Type Implementation-specific register | Unit MFC 
2 
gel 
ot xt 
ee ae : . = 
D Ñ £ £ EvOp Evip TrigOQp Trigip Á GpAEn GpBEn Reserved 
Sn A 2 2 a 2 A 2 4 
0|112/3/4 5/6 7/8 9/10 11/12/13 14/15 16|17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
a8 
DMAHi DMALo Žž & Reserved 
M viv t4 4y 4 
32 33 34 35/36 37 38 39|40|41|42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0 Evo Event 0 enable. Set to ‘1’ to enable an MFC proxy command queue full event 
1 Ev1 Event 1 enable. Set to ‘1’ to enable an MFC SPU command queue full event 
2 TrigO Trigger 0 enable. Set to ‘1’ to enable an MFC command or alignment error 
3 Trig1 Trigger 1 enable. Set to ‘1’ to enable atomic access to a cache-inhibited page (ATO Cl) 
Event 0 position select. Places event 0 onto d_event_out[0:3] 
00 Place event 0 onto bit 0 
4:5 Ev0p 01 Place event 0 onto bit 1 
10 Place event 0 onto bit 2 
11 Place event 0 onto bit 3 
Event 1 position select. Places event 1 onto d_event_out[0:3] 
00 Place event 1 onto bit 0 
6:7 Evip 01 Place event 1 onto bit 1 
10 Place event 1 onto bit 2 
11 Place event 1 onto bit 3 
Trigger 0 position select. Places trigger 0 onto d_trigger_out[0:3] 
00 Place trigger O onto bit 0 
8:9 TrigOp 01 Place trigger O onto bit 1 
10 Place trigger O onto bit 2 
11 Place trigger 0 onto bit 3 
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Bits Field Name Description 
Trigger 1 position select. Places trigger 1 onto d_trigger_out[0:3] 
00 Place trigger 1 onto bit 0 
10:11 Trig1p 01 Place trigger 1 onto bit 1 
10 Place trigger 1 onto bit 2 
11 Place trigger 1 onto bit 3 
Activate disable for DMA trace output latches. Set to ‘1’ to disable tracing SPU or DMA trace or per- 
42 DMAdis formance data. This can be set when the Performance Monitor and Trace Bus are not in use by the 
DMAC or SPU (SPU trace data passes through the DMA) in order to save power by disabling the 
latches used for tracing. 
Group A Enable: 
00 Select neither group 
: E 
19:14 GpAEN 10 Select GroupA0: REQIFO Trace Data 
01 Select GroupA1: REQIF1 Trace Data 
Group B Enable: 
00 Select neither group 
: BE 
15:16 GpBEN 10 Select GroupBO: MMIO Trace Data 
01 Select GroupB1: TAG Trace Data 
17:31 Reserved Bits are not implemented; all bits read back zero. 
DMA Group High data select for d_trc_data_out[64:95] 
1000 Select Group A[0:31] 
32:35 DMAHi 0100 Select Group B[0:31] 
0010 Select Group C[0:31] 
0001 Select Group D[0:31] 
DMA Group Low data select for d_trc_data_out[96:127] 
1000 Select Group A[32:63] 
36:39 DMALo 0100 Select Group B[32:63] 
0010 Select Group C[32:63] 
0001 Select Group D[32:63] 
40 PMD1 Enable DMA Performance Monitor Data 1 to d_trc_data_out[0:31] 
41 PMD2 Enable DMA Performance Monitor Data 2 to d_trc_data_out[64:95] 
42:63 Reserved Bits are not implemented; all bits read back zero. 
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The MFC_CER Register contains the MFC command queue entry index of the command that generated the 
invalid DMA command interrupt or the DMA alignment interrupt. 


The MFC must stop execution on the first error. The MFC_CER Register must point to the command that 
caused the first error. 











BE_MMIO_Base 


n) 


Register Short Name MFC_CER Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x'400C00’ + (x‘02000’ x | Memory Map Area SPE Privilege 1 




































































Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit SBI 
Reserved 
4 4 
0O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
f) 
ge] 
E 
a 
= 
oO 
=) 
9, 
ge 
= 
o 
E 
E 
je) 
“| 
P 
Q Reserved = 
vv vy 4 
32/33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59|60 61 62 63 
Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
MFC command queue index 
32 Q 0 MFC proxy command queue index 
1 MFC SPU command queue index 
33:59 Reserved Bits are not implemented; all bits read back zero. 
60:63 MFC_Command_Queu | Points to the MFC command queue entry that caused the command error. Bit [60] is always ‘0’ for 
` e_Index the MFC proxy command queue index. 
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3.2.14 SPU ECC and Error Mask Registers 


The SPU uses an error checking and correcting (ECC) mechanism to protect the SPU local-store memory 
from soft errors. A soft error is a bit that changes in memory without being written. 


3.2.14.1 SPU ECC Control Register (SPU_ECC_Cntl) 


This is an implementation-specific register that controls the operation of the SPU ECC memory-checking 
mechanism. See SPU ECC Status Register (SPU_ECC_Stat) on page 92 for more information. 















































Register Short Name SPU_ECC_Cntl Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘401000’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR x‘00000000_00000003’ Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
¥ > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved D l B S E 


t4? ee 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57|58/59 60 |61 | 62/63 






































Bits Field Name Description 
0:57 Reserved Bits are not implemented; all bits read back zero. 
ECC detection disable. 
0 Enable ECC detection and correction 
1 Disable ECC detection and correction 
58 D Note: Only enable this bit when the SPU is not performing DMA transfers and is not running. For 


example, enable this bit wnen no ECC detection is occurring and there is no ECC error status. ECC 
generation continues, so that if the ECC is reenabled, the local store contains the correct ECC val- 
ues. 





ECC error injection (used for chip validation). 




















00 The SPU stores DMA write data correctly to the local store. 
11 The SPU stores all DMA full quadword stores to the local store with an uncorrectable two- 
59:60 bit ECC error. 

10,01 The SPU stores all DMA full quadword stores to the local store with a correctable single-bit 
ECC error. 

SPU_ECC_Cnil[59:60] are XORed with DMA write-data bits [0:1] as the data is loaded into the local 

store. 

Start background ECC local-store scrubbing. Used to continuously run ECC local-store scrubbing. 

0 The SPU only scrubs when uncorrectable ECC errors are detected. 

61 B 1 The SPU immediately starts scrubbing the SPU local store unless disabled by the ECC 

local-store scrubbing enable bit [63]. 

Contact your IBM technical support representative for more information about scrubbing and data 

ECC error detection and recovery. 
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Bits Field Name Description 
ECC error stop enable. 
0 The SPU does not detect when an uncorrectable ECC error occurs and does not generate 
62 s a DERR on the EIB. Also, class 0 error interrupts are not generated. 
1 The SPU stops when an uncorrectable ECC error occurs, or when it receives a DERR from 
the EIB and generates a DERR on the EIB any time the local store is transferring 
data onto the EIB. The address is not saved when an ECC error occurs. 
ECC local-store scrubbing enable. If disabled, ECC errors are not corrected in the local store except 
for instruction fetch ECC errors. 
53 E (0) ECC local-store scrubbing disabled 
1 ECC local-store scrubbing enabled 











3.2.14.2 SPU ECC Status Register (SPU_ECC_Stat) 


This implementation-specific register contains the status of ECC errors and repair operation. These are rare 
but can occur at any time. ‘0’ must be written to this register to clear the status bits. Writing ‘1’ sets the status 
bit, but this does not affect any other SPU operations. 


















































Register Short Name SPU_ECC_Stat Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘401008’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
i > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
3 
Z 
2 
Reserved Cnt EMD  IBSUE 
< 
viv 4 y i A A AZ 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55/56 | 57 | 58) 59 | 60 | 61 | 62 | 63 
























































Bits Field Name Description 
0:47 Reserved Bits are not implemented; all bits read back zero. 
i Count of local-store quadwords repaired by ECC scrubbing or by an instruction ECC error (clamped 
48:55 Cnt mas 
at x‘FF’). 
56 Reserved Bit is not implemented; bit reads back zero. 
DMA ECC error. 
0 The SPU has not detected a load DMA ECC error. 
1 The SPU has detected one or more DMA ECC errors. 

57 M One or more ECC errors were detected on DMA transfers. The error is repaired inline if it is a cor- 
rectable ECC error. DMA correctable ECC errors repaired inline are not counted in ECC repair 
count. If an uncorrectable error is detected, this bit and the ECC error stop are set. This bit indicates 
that a DMA write DERR was received from the MFC only if uncorrectable ECC is enabled. 
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Bits Field Name Description 

Data ECC error. 
0 The SPU has not detected a load instruction ECC error. 
1 The SPU has detected one or more load instruction ECC errors. 

58 D One or more ECC errors were detected during an SPU local store load instruction. The error is 
repaired inline if it is a correctable ECC error. DMA data-correctable ECC errors repaired inline are 
not counted in ECC repair count. If an uncorrectable error is detected, this bit and the ECC error 
stop [62] are set. 

Instruction ECC error. 
0 The SPU has not detected an instruction ECC error. 
1 The SPU has detected one or more Instruction ECC errors. 

59 One or more ECC errors were detected on an instruction fetch. The error is repaired by ECC scrub- 
bing logic if it is a correctable ECC error. Instruction-correctable ECC errors repaired are counted in 
ECC repair count. If an uncorrectable error is detected, this bit and the ECC error stop [62] are set 
only if uncorrectable ECC detection is enabled. See the SPU_ECC_Cnt! Register for more informa- 
tion. 

ECC scrub in process. Read only. 

60 B 0 The SPU is not currently running an ECC scrub or repair. 

1 The SPU is currently running a local-store ECC scrub or repair. 
ECC scrub completed. 

61 S (0) The SPU has not completed a scrub of the local store. 

1 The SPU has completed one or more scrubs of the full local store. 
ECC error stop. 
0 The SPU has not detected an uncorrectable ECC error. 

62 U 1 The SPU has detected, stopped, and generated a class 0 interrupt for an uncorrectable 
ECC error. Uncorrectable ECC errors found during scrubbing are not logged and are not 
repaired. 

ECC error status. 
63 E 0 The SPU has not detected an ECC error. 
1 The SPU has detected and repaired an ECC error in the SPU local store that was found 
during scrubbing or for an instruction ECC error. 
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3.2.14.3 SPU ECC Address Register (SPU_ECC_Addr) 


This implementation-specific register contains the local-store address of the ECC error most recently repaired 
by the SPU ECC scrubbing logic. Uncorrectable ECC errors are not logged. ECC errors are rare but can 
occur at any time. 



































Register Short Name SPU_ECC_Addr Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From SPEn: x‘401010 + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 

Reserved 


0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved LSA Reserved 


vy¥ vy¥ 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45|46 47 48 49 50 51 52 53 54 55 56 57 58 59/60 61 62 63 












































Bits Field Name Description 
0:45 Reserved Bits are not implemented; all bits read back zero. 
46:59 LSA Local store quadword address 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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3.2.14.4 SPU Error Mask Register (SPU_ERR_Mask) 


Note: Reads and writes can be to the full 64 bits or to only the lower-word bits [32:63]. 















































Register Short Name SPU_ERR_Mask Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From SPEn: x‘401018’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR x‘00000000_00000001’ Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 

Reserved 
g > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved l 


< 








32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62/63 











Bits Field Name Description 





0:62 Reserved Bits are not implemented; all bits read back zero. 





Invalid instruction interrupt enable 
0 Invalid instruction interrupt generation disabled. 


63 l 1 Invalid instruction interrupt generation enabled. Generates a class 0 SPU error interrupt in 
INT_Stat_class0[61]. 


Note: Illegal operation detection and SPU halting are always enabled. 
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3.2.15 MFC Performance Monitor Register 


3.2.15.1 Performance Monitor/Trace Tag Status Wait Mask Register (PM_Trace_Tag_Wait_Mask) 





The wait mask is applied to the tag status information in the MFC_RdTagStat channel. If all tag status bits are 
set to 0 (the tag group has outstanding operations or has been disabled by the query mask), then the mask 
waits for bits to be set to ‘1’ (the tag group has no outstanding operations or was not disabled by the query 
mask). 


In this wait mask register, bit [82] corresponds to tag group 31, and bit [63] corresponds to tag group 0. 






















































































Register Short Name PM_Trace_Tag_Wait_Mask Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘401400’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
4 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
WM 
M 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
Wait mask (for each bit in field) 
32:63 WM 0 Waiting on all masked tags. 
1 At least one masked tag is complete. 
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3.3 SPE Privilege 2 Memory Map Registers 


This section lists the registers included in the SPE Privilege 2 memory map. 


3.3.1 SLB Management Registers 


These registers maintain the SLB array contents. 


3.3.1.1 SLB Index Register (SLB_Index) 


To properly load the array with data, the SLB requires a write sequence similar to the one for the TLB. First, 
the index must be written to specify the entry for loading. The VSID and ESID fields are written independently, 
unlike the TLB writes. The SLB_VSID write should follow the index. The SLB_ESID data is written last 
because it contains the Valid bit, and the entry should not be valid until all data is loaded. 


The CBE implements the 3 least significant bits for the MMU. These registers are not available for the PPE. 


See the Cell Broadband Engine Architecture document for more information about this register. 


















































Register Short Name SLB_Index Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘061108’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 
Reserved 
$ > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved NI SLB_Index 
< yy Vy 3} 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51/52 53 54 55 56 57 58 59 60/61 62 63 























Bits Field Name Description 
0:51 Reserved Bits are not implemented; all bits read back zero. 
52:60 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


bits read back zero. 





Bits are encoded to select one of eight SLB entries. 

The SLB_Index-implemented bits are defined in the range [61:63] (3 bits total). The eight possible 
61:63 SLB_Index index values are the eight binary combinations of those 3 bits: ‘000’, ‘001’, ‘010’, ‘011’, and so forth. 
The SLB array entries are most commonly referred to by the decimal equivalent of those binary 
numbers: 0, 1, 2, ..., 7. 
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3.3.1.2 SLB Virtual Segment ID Register (SLB_VSID) 


To properly load the array with data, the SLB requires a write sequence similar to the one for the TLB. First, 
the index must be written to specify the entry for loading. The VSID and ESID fields are written independently, 
unlike the TLB writes. The SLB_VSID write should follow the index. The SLB_ESID data is written last 
because it contains the Valid bit, and the entry should not be valid until all data is loaded. 












































Register Short Name SLB_VSID Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 

Hex Offset From SPEn: x‘061118’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 

NI VSID 

M 1 + > 

| 012 3 4 5 6 7 8 9 10 11 12 13 14/15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
VSID Ks Kp N L C NI LP Reserved 





tyy ššš šł4 y4 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51|52|53|54|55|56|57 58|59|60 61 62 63 













































































Bits Field Name Description 
0:14 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
` bits read back zero. 
15:51 VSID Virtual Segment ID. 
52 Ks Storage Key supervisor (privileged) state. 
53 Kp Storage Key problem state. 
54 N No Execute Segment. 
Large page bit. 
55 L 1 Large page (64 KB, 1 MB, 16 MB) 
0 Small page (4 KB) 
56 Cc Class bit. 
: Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
57:58 NI : 
bits read back zero. 
59 LP Large page-size bit. 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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3.3.1.3 SLB Invalidate Entry Register (SLB_Invalidate_Entry) 


Software uses this register to maintain the SLB and update entries. 

























































































Register Short Name SLB_Invalidate_Entry Privilege Type Privilege 2 
Access Type MMIO Write Only Width 64 bits 
Hex Offset From SPEn: x‘061120’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit SMM 
ESID 
Í > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
ESID NI Reserved 
< 4y y 
32 33 34 35|36|37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:35 ESID Effective Segment ID. 
36 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 
37:63 Reserved Bits are not implemented; all bits read back zero. 
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3.3.2 Context Save and Restore Register 

The hardware supports the capability to suspend a task on the SPE, fully save its context, fully restore that 
context at a later time, and resume the task. 

3.3.2.1 MFC Command Queue Context Save/Restore Register (MFC_CQ_SR) 


Table 3-4 through Table 3-10 define the MFC Command Queue Context Save/Restore Register. 


























Register Short Name MFC_CQ_SR Privilege Type Privileged 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset Address x‘02000’ — ‘022FF’ From Memory Map Area 
See Table 3-4 through SPE Privilege 2 
Table 3-10 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register Unit SMF 





Context for the MFC command queue and issue logic is accessed starting at offset x‘2000’, as shown in 
Table 3-4 on page 101. The MFC command queues contain 16 entries for the SPU and eight for the PPU, 
and each MFC command queue entry is accessed with three MMIO doublewords. The contents of double- 
word 0 (DWO) are listed in Table 3-5 on page 102. The contents of doubleword 1 (DW1) are listed in 
Table 3-6 on page 103. The contents of doubleword 2 (DW2) are listed in Table 3-7 on page 103. 


The rightmost two columns of Table 3-4 describe the fourth doubleword for each entry in the MFC command 
queue. For the first 16 entries, the doubleword is divided into the SPU Issue Word (SIW) and the Tag 
Completion Word. For the last eight entries, the doubleword is divided into the PPU Issue Word (PIW) and a 
Reserved Word. The format of the SPU Issue Word is described in Table 3-8 on page 103. The format of the 
PPU Issue Word is described in Table 3-9 on page 103. Table 3-10 on page 104 describes the data in the 
Tag Completion Word for the first 16 entries. The Tag Completion Word contains the counts for two tag 
groups for the SPU and PPU, the stall, list, and finish bits for each SPU entry, and the start and finish bits for 
each PPU entry (only in the first eight Tag Completion Words). 


See the Cell Broadband Engine Architecture document for more general information about Context Save and 
Restore. 
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= a 2 TN 
— Za N T = 
£ = = 5 g 
A A a ae 5 
iS) © 
Address g g = 258 È 
= = 0 O E 
Offset 5 ő © < 8 = 
8 S = Pa) 9 Ə 
[=] (e 5 22 x 
es x x D + 
+ + f TS 
i , MFC SPUQ Entry 0, |MFC SPUQ Entry 0, MFC SPUQ Entry 0, MFC SPUQ Entry 0, : 
x‘02000 DWO y DWi1 y DW2 y SIW Y See Section 3-10 on page 104 
i , [MFC SPUQ Entry 1, |MFC SPUQ Entry 1, MFC SPUQ Entry 1, | MFC SPUQ Entry 1, ; 
x‘02020 DWo y DW1 Y DW2 y SIW Y See Section 3-10 on page 104 
: , MFC SPUQ Entry 2, |MFC SPUQ Entry 2, MFC SPUQ Entry 2, MFC SPUQ Entry 2, das 
x‘02040 pwo DW1 DW2 Siw See Section 3-10 on page 104 
è , MFC SPUQ Entry 3, |MFC SPUQ Entry 3, MFC SPUQ Entry 3, | MFC SPUQ Entry 3, ; i 
x‘02060 pwo DWI DW2 Siw See Section 3-10 on page 104 
i , MFC SPUQ Entry 4, |MFC SPUQ Entry 4, (MFC SPUQ Entry 4, | MFC SPUQ Entry 4, ; $ 
x‘02080 pwo DWI DW2 Siw See Section 3-10 on page 104 
‘ , [MFC SPUQ Entry 5, |MFC SPUQ Entry 5, MFC SPUQ Entry 5, | MFC SPUQ Entry 5, ; 2 
x‘020A0 DWO DWI DW2 Siw See Section 3-10 on page 104 
i , MFC SPUQ Entry 6, MFC SPUQ Entry 6, (MFC SPUQ Entry 6, | MFC SPUQ Entry 6, 
x‘020C0 DWo y DW1 y DW2 y SIW y See Section 3-10 on page 104 
ji , [MFC SPUQ Entry 7, | MFC SPUQ Entry 7, MFC SPUQ Entry 7, | MFC SPUQ Entry 7, f 
x‘020E0 DWwo y DW1 y DW2 y SIW y See Section 3-10 on page 104 
i , [MFC SPUQ Entry 8, MFC SPUQ Entry 8, MFC SPUQ Entry 8, | MFC SPUQ Entry 8, ; _ 
x‘02100 pwo DW1 DW2 Siw See Section 3-10 on page 104 
i , [MFC SPUQ Entry 9, MFC SPUQ Entry 9, MFC SPUQ Entry 9, | MFC SPUQ Entry 9, . _ 
x‘02120 Dwo DWI DW2 Siw See Section 3-10 on page 104 
i , [MFC SPUQ Entry a, |MFC SPUQ Entry a, MFC SPUQ Entry a, | MFC SPUQ Entry a, i _ 
x‘02140 Dwo DW1 DW2 Siw See Section 3-10 on page 104 
i , [MFC SPUQ Entry b, MFC SPUQ Entry b, MFC SPUQ Entry b, | MFC SPUQ Entry b, ; E 
x‘02160 DWO DWI DW2 Siw See Section 3-10 on page 104 
‘ , [MFC SPUQ Entry c, MFC SPUQ Entry c, MFC SPUQ Entry c, MFC SPUQ Entry c, : 
x‘02180 DWo DW1 DW2 SIW See Section 3-10 on page 104 
i , MFC SPUQ Entry d, MFC SPUQ Entry d, |MFC SPUQ Entry d, |MFC SPUQ Entry d, ; 
x‘021A0 DWO DW1 DW2 SIW See Section 3-10 on page 104 
: , MFC SPUQ Entry e, MFC SPUQ Entry e, (MFC SPUQ Entry e, | MFC SPUQ Entry e, i 7 
x‘021C0 Dwo DW1 DW2 Siw See Section 3-10 on page 104 
1. For a definition of this format, see Table 3-5 Context Save/Restore MFC Command Queue Doubleword 0 (CSR_CMDQ_DWO) on 
page 102. 
2. For a definition of this format, see Table 3-6 Context Save/Restore MFC Command Queue Doubleword 1 (CSR_CMDQ_DW1) on 
page 103. 
3. For a definition of this format, see Table 3-7 Context Save/Restore MFC Command Queue Doubleword 2 (CSR_CMDQ_DW02) 
on page 103. 
4. For a definition of this format, see Table 3-8 Context Save/Restore for MFC SPU Command Queue Issue State Machine on 
page 103. 
5. For a definition of this format, see Table 3-9 Context Save/Restore for MFC Proxy Command Queue Issue Machine State on 
page 103. 
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Table 3-4. Definitions for the MFC Context Save/Restore Registers (Read/Write) (Page 2 of 2) 


SONY 


COMPUTER: 
SREMARMER © 


SONY 
































eo OM Z aT 
= 5 => 
Ss z = 5E E 
a QO o S Hw = 
a a o gos al 
Address a a Q Bee E 
= Oot = 
Offset õ 5 ó 29 = o 
So roo) g 225 = 
© © = oo ç 
9 9 Oo xo x 
is l * +B + 
+ + + = 
‘ , |MFC SPUQ Entry f, |MFC SPUQ Entry f, |MFC SPUQ Entry f, | MFC SPUQ Entry f, eee 
x‘021E0 Dwo DWI DW2 Siw See Section 3-10 on page 104 
i , MFC PrxyQ Entry 0, |MFC PrxyQ Entry 0, MFC PrxyQ Entry 0, MFC PrxyQ Entry 0, 
x‘02200 DWO DW1 DW2 PIW Reserved 
i , MFC PrxyQ Entry 1, |MFC PrxyQ Entry 1, MFC PrxyQ Entry 1, MFC PrxyQ Entry 1, 
x‘02220 DWO DW1 DW2 PIW Reserved 
‘ , MFC PrxyQ Entry 2, | MFC PrxyQ Entry 2, MFC PrxyQ Entry 2, MFC PrxyQ Entry 2, 
x‘02240 DWO DW1 DW2 PIW Reserved 
‘ , MFC PrxyQ Entry 3, | MFC PrxyQ Entry 3, MFC PrxyQ Entry 3, | MFC PrxyQ Entry 3, 
x‘02260 DWO DW1 DW2 PIW Reserved 
i , MFC PrxyQ Entry 4, |MFC PrxyQ Entry 4, MFC PrxyQ Entry 4, (MFC PrxyQ Entry 4, 
x‘02280 DWO DW1 DW2 PIW Reserved 
‘ , |MFC PrxyQ Entry 5, | MFC PrxyQ Entry 5, | MFC PrxyQ Entry 5, | MFC PrxyQ Entry 5, 
x‘022A0 DWO DW1 DW2 PIW Reserved 
: , [MFC PrxyQ Entry 6, | MFC PrxyQ Entry 6, MFC PrxyQ Entry 6, (MFC PrxyQ Entry 6, 
x‘022C0 DWO DW1 DW2 PIW Reserved 
x‘022E0' MFC PrxyQ Entry 7, |MFC PrxyQ Entry 7, |MFC PrxyQ Entry 7, |MFC PrxyQ Entry 7, Reseed 





DWO 





DW1 





DWe2 





PIW 











1. For a definition of this format, see Table 3-5 Context Save/Restore MFC Command Queue Doubleword 0 (CSR_CMDQ_DWO) on 
2. oat ae of this format, see Table 3-6 Context Save/Restore MFC Command Queue Doubleword 1 (CSR_CMDQ_DW71) on 
3. La eee of this format, see Table 3-7 Context Save/Restore MFC Command Queue Doubleword 2 (CSR_CMDQ_DW02) 
4. Fora aie of this format, see Table 3-8 Context Save/Restore for MFC SPU Command Queue Issue State Machine on 
5. Ra sents of this format, see Table 3-9 Context Save/Restore for MFC Proxy Command Queue Issue Machine State on 

page 103. 








Table 3-5. Context Save/Restore MFC Command Queue Doubleword 0 (CSR_CMDQ_DW0O) 





























CSR_CMDQ_DWO Description 
0:14 List Address[0: 14] 
15:26 List Size[0:1 1] 
27:34 MFC Command Opcode[0:7] 
35:39 MFC Command Tag[0:4] 
40 List Valid Bit 
41:43 Rclass|D[0:2] 
44:46 TclassID[0:2] 
47:63 Reserved 
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Table 3-6. Context Save/Restore MFC Command Queue Doubleword 1 (CSR_CMDQ_DW1) 





CS_CMDQ_DW1 


Description 








0:51 


Effective Address (EA)[0:51] 





52:63 








Reserved 








Table 3-7. Context Save/Restore MFC Command Queue Doubleword 2 (CSR_CMDQ_DW02) 





CS_CMDQ_DW2 


Description 



































0:13 Local-Store Address[0:13] 
14:24 Transfer Size[0:10] 
25:36 Effective Address[52:63] 
37 No-op Valid Bit 
38 Quadword (QW) or Multiple QW Valid Bit 
39 EA Valid Bit 
40 Command Error Bit 
41:63 Reserved 





Table 3-8. Context Save/Restore for MFC SPU Command Queue Issue State Machine 









































CS_SPU_Issue_Word Description 
0:15 Entry Dependency State 
16 Entry Valid 
17:18 TclassID 
19:23 MFC Command Tag[0:4] 
24 0 DMA get command 
1 DMA put command 
25 Last Bit 
Dependency Type 
00 Normal 
26:27 01 MFC command with barrier modifier 
10 Barrier, mfesync, or mfceieio DMA command 
11 Reserved 
28 Stall Bit 
29 Issue Dependency Bit 
30:31 Reserved 








Table 3-9. Context Save/Restore for MFC Proxy Command Queue Issue Machine State 





CS_Prxy_Issue_Word 


Description 
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0:7 Entry Dependency State 
8:15 Reserved 
16 Entry Valid 
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Table 3-9. Context Save/Restore for MFC Proxy Command Queue Issue Machine State 


SONY 
































CS_Prxy_Issue_Word Description 
17:18 TclassID 
19:23 MFC Command Tag[0:4] 
24 0 DMA get command 
1 DMA put command 
25 Last Bit 
Dependency Type 
00 Normal 
26:27 01 MFC command with barrier modifier 
10 Barrier, mfcsync, or mfceieio MFC command 
11 Reserved 
28 Reserved 
29 Issue Dependency Bit 
30:31 Reserved 








Table 3-10. Context Save/Restore for Tag Completion Machine State 




























































































Word Address Group count Group Gaunt StallBit List Bit FinishBit Start Bt Finish Bx Not Used 
Been | (0:4) | [5:9] [10:13] [14:17] [8] [19] [20] [21] [22] [23:31] 
x‘0201C’ tagO tagi | tagO | tag1 Entry 0 Entry 0 Entry 0 Entry 0 Entry 0 Reserved 
x‘0203C’ tag2 | tag3  tag2 | tag3 Entry 1 Entry 1 Entry 1 Entry 1 Entry 1 Reserved 
x‘0205C’ tag4 tag5  tag4 | tag5 Entry 2 Entry 2 Entry 2 Entry 2 Entry 2 Reserved 
x‘0207C’ tag6 tag7 | tag6 | tag7 Entry 3 Entry 3 Entry 3 Entry 3 Entry 3 Reserved 
x‘0209C’ tag8 tag9 tag8 | tag9 Entry 4 Entry 4 Entry 4 Entry 4 Entry 4 Reserved 
x‘020BC’ tag 10 tag 11| tag 10 tag 11 Entry 5 Entry 5 Entry 5 Entry 5 Entry 5 Reserved 
x‘020DC’ tag 12 tag 13 | tag 12 tag 13 Entry 6 Entry 6 Entry 6 Entry 6 Entry 6 Reserved 
x‘020FC’ tag 14 tag 15| tag 14 tag 15 Entry 7 Entry 7 Entry 7 Entry 7 Entry 7 Reserved 
x‘0211C’ tag 16 tag 17 | tag 16 tag 17 Entry 8 Entry 8 Entry 8 Reserved Reserved | Reserved 
x‘0213C’ tag 18 tag 19 tag 18 tag 19 Entry 9 Entry 9 Entry 9 Reserved Reserved | Reserved 
x‘0215C’ tag 20 | tag 21 | tag 20 tag 21 Entry 10 Entry 10 Entry 10 Reserved Reserved | Reserved 
x‘0217C’ tag 22 | tag 23 | tag 22 tag23 | Entry 11 Entry 11 Entry 11 Reserved Reserved | Reserved 
x‘0219C’ tag 24 tag 25 | tag 24 tag25 | Entry 12 Entry 12 Entry 12 Reserved Reserved | Reserved 
x‘021BC’ tag 26 tag 27 | tag 26 tag27 Entry 13 Entry 13 Entry 13 Reserved Reserved | Reserved 
x‘021DC’ tag 28 tag 29 | tag 28 tag29 Entry 14 Entry 14 Entry 14 Reserved Reserved | Reserved 
x‘021FC’ tag 30 | tag 31 | tag 30 tag 31 Entry 15 Entry 15 Entry 15 Reserved Reserved | Reserved 
See the Cell Broadband Engine Architecture document for more information about this register. 
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3.3.2.2 SPU Local Store Limit Register (SPU_LSLR) 


Access to this register is privileged. The SPU_LSLR Register provides privileged software with a means to 
artificially limit the size of local store available to an application. This provides for backwards compatibility with 
applications sensitive to the size of local store. The value written to this register limits the size of the local 
store. If an application performs a quadword load or store from the SPU beyond the range of the SPU_LSLR, 
the operation occurs at the resulting wrapped address. The default value initialized at POR is a local-store 
address limit of 256 KB. This register can only be updated while the SPU is stopped, as indicated in 
SPU_Status[31]. 


Note: Reads and writes can be to the full 64 bits or to only the lower-word bits [82:63]. 



















































































Register Short Name SPU_LSLR Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘064058’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR x‘00000000_0003FFFF’ Value During POR Set By Scan initialization during POR 
Bits 49-63 hardwired 
Specification Type CBEA architected register Unit MFC 
Reserved 
M 4 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
NI AMR NI 
M viv vy 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45/46 47 48|49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
32:45 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


bits read back zero. 





Address Mask Register (AMR) Local Store Limit Range. 
111 256 KB local store access limit 
011 128 KB local store access limit 




















eee AMR 001 64 KB local store access limit 
000 32 KB local store access limit 
Other combinations are invalid. 
49:63 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. 
Reads always return ones. 
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3.3.2.3 SPU Channel Count Register (SPU_ChnICnt) 


The SPU_ChniCnt Register is used to read or initialize the count associated with the channel selected by the 
SPU Channel Index Register (SPU_ChnllIndex). 



































Register Short Name SPU_ChniCnt Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘064068’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By N/A 
Specification Type CBEA architected register Unit MFC 

NI 


012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 











NI Channel_Count 


YY 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59 60 61 62 63 


< 

















Bits Field Name Description 





| œ31 | n Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
' bits read back zero. 


Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
32:58 NI $ 
bits read back zero. 





59:63 Channel_Count The 5-bit channel count used by software. Typically set to 0, 1, or 16. See the Programming Note. 

















Programming Note: It is recommended that channel counts be initialized by privileged software before a 
new context is started in a SPU, as shown in the following table: 





Channel Names Recommended Initialization for the Channel Count Setting 


SPU_RdEventStat channel 
SPU_RdSigNotify1 channel 
SPU_RdSigNotify2 channel 
MFC_RadTagStat channel Initialize to 0 
MFC_RadListStallStat channel 
MFC_RdAtomicStat channel 
SPU_RdInMbox channel 


MFC_WrMSSyncReq channel 
MFC_WrTagUpdate channel 











MFC_WrOutMbox channel Initialize to:1 
MFC_WrOutlntrMbox channel 
MFC_Cmd channel Initialize to 16 
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3.3.3 Context Save and Restore Registers (Implementation-Specific) 


There are four implementation-specific context save and restore registers. 


3.3.3.1 Context Save and Restore for SPU MFC Commands Register (MFC_CSR_TSQ) 


This register stores context data for the state of the Tag Status Query logic in the DMAC unit of the MFC. 




































































Register Short Name MFC_CSR_TSQ Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘065008’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
J > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
> 
O 
Reserved 2 TSQC 
< 
vvvy 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60/61/62 63 
Bits Field Name Description 
0:60 Reserved Bits are not implemented; all bits read back zero. 





Tag Status Query Valid 
TSQV = 1 and TSQC = x‘01’_ Waiting for ANY condition to be met 
TSQV = 1 and TSQC = x‘10’ Waiting for ALL conditions to be met 

















61 TSQV 
TSQV =0 No pending query 
Note: A valid query with immediate condition ‘00’ should never be saved as context because the 
query is always completed before a context save. 
62:63 TSQC Tag Status Query Condition 
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3.3.3.2 Context Save and Restore for SPU MFC Commands Register (MFC_CSR_CMD1) 


MFC_CSR_CMD1 and MFC_CSR_CMD2 are used for context save and restore operations. 
MFC_CSR_CMD1 stores the data for the MFC_LSA channel and the MFC_EAH channel. 















































Register Short Name MFC_CSR_CMD1 Privilege Type Privilege 2 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From SPEn: x‘065010’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 

Reserved MFC_LSA 
Y 4 y 4 
012 3 4 5 6 7 8 9 10 11 12 13/14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
MFC_EAH 





























32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:13 Reserved Bits are not implemented; all bits read back zero. 
14:31 MFC_LSA MFC local store address. 
32:63 MFC_EAH MFC effective address high. 
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3.3.3.3 Context Save and Restore for SPU MFC Commands Register (MFC_CSR_CMD2) 


MFC_CSR_CMD1 and MFC_CSR_CMD2 are used for context save and restore operations. 
MFC_CSR_CMD2 stores the data for the MFC_EAL channel, the MFC_Size channel, and the MFC_TagID 
channel. 



































Register Short Name MFC_CSR_CMD2 Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘065018’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 

MFC_EAL 


012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 






























































w 
ke 
D 
© 
H 
rg 
MFC_Size Reserved Ss MFC_Tag 
M vv Vv y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55 56 57/58/59 60 61 62 63 
Bits Field Name Description 
0:31 MFC_EAL MFC effective address low. 
32:47 MFC_Size MFC transfer size. 
48:57 Reserved Bits are not implemented; all bits read back zero. 
58 MFC_TagTE MFC Tag data [0:26] is nonzero. A tag error causes an MFC command error interrupt. 
59:63 MFC_Tag MFC Tag ID data [27:31]. 
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3.3.3.4 Context Save and Restore for SPU Atomic Immediate Command (MFC_CSR_ATO) 
This register stores the state of the Atomic Immediate command in the MFC SPUQ. 


The Atomic Immediate command is only valid for context saves when the command has not yet gone to the 
atomic unit for processing. Any atomic command that has gone to the atomic unit is completed prior to 
context save and is invalidated. 














































































































Register Short Name MFC_CSR_ATO Privilege Type Privilege 2 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘065020’ + (x‘80000’ x n) Memory Map Area SPE Privilege 2 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
J > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved AV Reserved AT Reserved ATO_QID 
‘i Vvy Vy y vy 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46|47|48 49 50 51 52 53/54 55/56 57 58 59|60 61 62 63 
Bits Field Name Description 
0:46 Reserved Bits are not implemented; all bits read back zero. 
47 AV Atomic valid. 
48:53 Reserved Bits are not implemented; all bits read back zero. 
Atomic type. 
00 No atomic immediate command 
54:55 AT 01 getllar 
10 putile 
11 putiluc 
56:59 Reserved Bits are not implemented; all bits read back zero. 
60:63 ATO_QID Entry ID of the MFC SPU command queue holding the atomic command. 
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3.4 SPE Problem State Memory Map Registers 


This section lists the registers included in the problem state memory map. 
3.4.1 MFC Multisource Synchronization Register 


3.4.1.1 MFC Multisource Synchronization Register (MFC_MSSync) 


This register is the interface to the MFC multisource synchronization facility. See the Cell Broadband Engine 
Architecture document for more information about this facility. Writing any value to this register requests a 
synchronization. At the time of the write, the MFC starts to track all outstanding transfers targeting the corre- 
sponding SPE. When read, this register returns the current status of the last request. A value of zero is 
returned when all transfers targeting the SPE and received before the last write of the MFC_MSSync Register 
are complete. 
















































































Register Short Name MFC_MSSync Privilege Type Problem State 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From SPEn: x‘040000’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MFC 
Reserved 
J > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved P 
< 
y y 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62|63 
Bits Field Name Description 
0:62 Reserved Bits are not implemented; all bits read back zero. 
Pending 
63 P 0 All transfers before writing the MFC_MSSync Register are complete. 
1 All transfers before writing the MFC_MSSync Register are not complete. 
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3.4.2 MFC Command Parameter Registers 


These registers describe the MFC Command Parameter channels. 


3.4.2.1 MFC Local Store Address Register (MFC_LSA) 


The MFC local store address parameter stored in the MFC_LSA Register is used to supply the SPU local 
store address associated with a DMA command to be queued. This address is used as the source or destina- 
tion of the DMA transfer as it is defined in the DMA command. 


The contents of the MFC local store address parameter are not persistent and must be written for each DMA 
command-enqueued sequence. 


The validity of this parameter is checked asynchronous to the instruction stream. If the address is unaligned, 
MFC command queue processing is suspended, and an MFC DMA alignment exception is generated. 


Note: Providing a local store address above the implemented range of local store causes the local store 
address to wrap around to a valid address, but an exception is not posted if this occurs. 



































Register Short Name MFC_LSA Privilege Type Problem State 
Access Type MMIO Write Only Width 32 bits 
Hex Offset From SPEn: x‘043004’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 

NI MFC_Local_Store_Address 


012 3 4 5 6 7 8 9 10 11 12 13/14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 



































Bits Field Name Description 
0:13 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
i bits read back zero. 
14:31 MFC_Local_Store_Addr MFC_LSA[25:31] must always be aligned to a transfer-size boundary and the 4 least significant bits 
, ess of the local-store address must match the 4 least significant bits of the effective address. 
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3.4.2.2 MFC Class ID and Command Opcode Register (MFC_ClassID_CMD) 


This register is documented in the Cell Broadband Engine Architecture as two registers, MFC_ClassID and 
MFC_CMD. The MFC class ID parameter is used to specify the replacement class ID and the transfer class 


ID for each MFC command. The transfer class ID (TclassID) bit field is used to identify access to storage with 
differing characteristics. 


The write-only MFC_ClassID_CMD Register is related to the MFC_CMDStatus Register, which is read only. 
See MFC Command Status Register (MFC_CMDStatus) on page 114 for more information. 










































































Register Short Name MFC_ClassID_CMD Privilege Type Problem State 
Access Type MMIO Write Only Width 32 bits 
Hex Offset From SPEn: x‘043014’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
O Q 
E N 
8 8 
NI E NI £ NI MFC_CMD_Opcode 
M vvvy vvvy 4 y 4 
O 1 2 3 4 5|6 7/8 9 10 11 12 13/14 15/16 17 18 19 20 21 22 23/24 25 26 27 28 29 30 31 
Bits Field Name Description 
0:5 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
i bits read back zero. 
6:7 TclassID Transfer class identifier 
8:13 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
` bits read back zero. 
14:15 RclassID Replacement class identifier 
16:23 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
i bits read back zero. 
24:31 MFC_CMD_Opcode MFC command opcode 

















Programming Note: The total number of queue slots is implementation-specific and varies between imple- 
mentations. For portability of an application, the enqueue sequence for MFC commands and the method to 
determine the number of queue slots available should be provided as a macro. 
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3.4.2.3 MFC Command Status Register (MFC_CMDStatus) 


The MFC_CMDStatus Register contains the return code from the last attempt to enqueue an MFC command. 
The return code is read from the same location as the command, tag, and size. 


Note: The MFC_CMDStatus Register is a read-only, 32-bit register; the most significant 16 bits are imple- 
mentation specific. The MFC command return code in the least significant bits returns the command status 
when read. 


The MFC_CMDStatus Register, which is read only, is related to the MFC_ClassID_CMD Register, which is 
write only. See MFC Class ID and Command Opcode Register (MFC_ClassID_CMD) on page 113 for more 
information. 



























































Register Short Name MFC_CMDStatus Privilege Type Problem State 
Access Type MMIO Read Only Width 32 bits 
Hex Offset From SPEn: x‘043014’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
NI Reserved RC 
M voy 4 vy 
012 3 4 5 6 7 8 9 10 11 12 13 14 15/16 17 18 19 20 21 22 23 24 25 26 27 28 29/30 31 
Bits Field Name Description 
0:5 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


bits read back zero. 





Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. Bits 





6:7 NI return the last value written to this address (the TClass ID field, bits [6:7] of the MFC_ClassID_CMD 
Register). 
8:13 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


bits read back zero. 





Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. Bits 
14:15 NI return the last value written to this address (the RClass ID field, bits [14:15] of the 
MFC_ClassID_CMD Register). 




















16:29 Reserved Bits are not implemented; all bits read back zero. 
MFC command return code 
00 Command enqueue successful. 
01 Command enqueue failed due to sequencing error. 
30:31 RC 10 Command enqueue failed due to insufficient space in the command queue (the free space 
in the command queue is zero). 
11 Command enqueue failed due to sequencing error, and free space in the command queue 
is zero. 
Synergistic Processor Element MMIO Registers Version 1.5 


Page 114 of 357 April 2, 2007 


SONY 


SONY “> Registers 


SPIKERI © 


Cell Broadband Engine 


3.4.3 MFC Proxy Command Queue Control Registers 


The registers in this section are used to control the MFC proxy command queue. 


3.4.3.1 MFC Queue Status Register (MFC_QStatus) 


The MFC_QStatus Register contains the current status of the MFC command queue. MFC_QStatus[0] indi- 
cates whether the MFC proxy command queue is empty or contains valid commands that are not yet 
complete. The least significant 4 bits of this register return the number of entries available in the MFC proxy 
command queue. A value of zero in this field indicates that the queue is full. 



































Register Short Name MFC_QStatus Privilege Type Problem State 
Access Type MMIO Read Only Width 32 bits 
Hex Offset From SPEn: x‘043104’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 

Q 

O 

o 

Q 

N 

o! 

oO 

E 

9, 

O 
E NI t 
vy vy 4 
0l1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27/28 29 30 31 














Bits Field Name Description 








MFC proxy command queue empty. All MFC operations are complete. 
0 E 0 MFC proxy command queue contains commands 
1 MFC proxy command queue does not contain commands 





Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 


Via Ni bits read back zero. 





MFC queue free space 

This field contains the number of queue entries available. Software can use this field to set a loop 
28:31 MFC_Q_Free_Space |count for the number of MFC commands to enqueue. Software must not assume a command is 
enqueued based on the free space. Other conditions may cause the command issue sequence to 
fail. See the Cell Broadband Engine Architecture document for more information. 
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3.4.3.2 SPU Mailbox Status Register (SPU_Mbox_Stat) 


The SPU_Mbox_Stat Register contains the current state of the mailbox queues between the SPU and other 


processors and devices. 





Register Short Name 


SPU_Mbox_Stat Privilege Type Problem State 





Access Type 


MMIO Read Only Width 32 bits 





Hex Offset From 
BE_MMIO_Base 


SPEn: x‘044014’ + (x‘80000’ x n) Memory Map Area SPE Problem State 





Value at Initial POR 


x‘00000400’ Value During POR Set By Scan initialization during POR 








Specification Type 





MFC 











CBEA architected register Unit 





NI 


l NI S NI P 


y vv y 4 y Vv vy 





O 1 


2 3 4 5 6 7 8 9 


10 11 12 13 14|15/16 17 18 19 20/21 22 23/24 25 26 27 28 29 30) 31 























Bits Field Name 


Description 








0:14 NI 


Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 





15 


16:20 NI 


SPU Outbound Interrupt Mailbox status is equal to 1 minus the SPU_WrOutlntrMbox channel count. 


This status bit is set when the SPU Outbound Interrupt Mailbox is written by the SPU. It is reset 
when the PPU reads the SPU Outbound Interrupt Mailbox. 


0 SPU Outbound Interrupt Mailbox is empty. 
1 SPU Outbound Interrupt Mailbox contains a new value. 


Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 





21:23 


SPU Inbound Mailbox status is equal to 4 minus the SPU_RdlnMbox channel count. 


This status bit decrements when the SPU Inbound Mailbox is written by the PPU. It increments 
when the SPU reads the SPU Inbound Mailbox. 


000 SPU Inbound Mailbox is full. 

001 SPU Inbound Mailbox has one location available to load. 
010 SPU Inbound Mailbox has two locations available to load. 
011 SPU Inbound Mailbox has three locations available to load. 
100 SPU Inbound Mailbox has four locations available to load. 
‘101’ through ‘111’ are unused. 





24:30 NI 


Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 





31 








SPU Outbound Mailbox status is equal to 1 minus the SPU_WrOutMbox channel count. 


This status bit is set when the SPU Outbound Mailbox is written by the SPU. It is reset when the 
PPU reads the SPU Outbound Mailbox. 


0 SPU Outbound Mailbox is empty. 
1 SPU Outbound Mailbox contains a new value. 
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3.4.3.3 SPU Run Control Register (SPU_RunCntl) 


The SPU_RunCnil Register is used to start and stop the execution of instructions in the SPU. The SPU can 
dynamically change the state of the run bit. The current status of the SPU run state is available in the SPU 
Status Register (SPU_Status). When this register is read, it returns the last data written for the last valid write. 



































Register Short Name SPU_RunCntl Privilege Type Problem State 
Access Type MMIO Read/Write Width 32 bits 
Hex Offset From SPEn: x‘04401C’ + (x‘80000’ x Memory Map Area SPE Problem State 
BE_MMIO_Base n) 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 

Reserved RC 


y t4} 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29/30 31 














Bits Field Name Description 





0:29 Reserved Bits are not implemented; all bits read back zero. 





SPU run control 

00 SPU stop request. No instructions are issued. 

30:31 RC 01 SPU run request. Instruction is issued if not stalled on condition. 

10,11 Reserved. 

The current status of the SPU run state is available in the SPU_Status Register. 

















Programming Note: After SPU_RunCntl[30:31], the run control bit, is set to stop the SPU, the SPU is not 
stopped until SPU_Status[31], the run status bit, reads ‘0’. See the SPU Status Register (SPU_Status) for 
more information. A write of ‘01’ while the SPU is idle causes the SPU to restart from the Program Counter at 
which it stopped. The SPU ignores writes of ‘01’ unless the SPU is idle, as indicated when SPU_Status[31], 
the R bit, reads ‘0’. 
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3.4.3.4 SPU Status Register (SPU_Status) 


Reading this register provides a snapshot of the current SPU status. The status read can be dynamically 
changing if the SPU is running. If the SPU is stopped or halted, the status remains static until it is changed by 
software. If the SPU was stopped under PPU control at the same time that the SPU was waiting on a blocked 
channel, the SPU Wait Status bit is set in conjunction with the SPU Run Status bit. Multiple state bits ([26:27] 
and [29:30]) may be set based on the program design. 


When SPU_Status[31] changes to ‘1’, SPU_Status[26:27] and SPU_Status[29:30] are reset to ‘0’. 





























Register Short Name SPU_Status Privilege Type Problem State 
Access Type MMIO Read Only Width 32 bits 
Hex Offset From SPEn: x‘044024’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
O O 
oO oO 
Z 2 
D D 
SC NI £ N @¢& | SWHP R 





Y vy Ze a 2 2 2 2 2 







































































0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15/16 17 18 19 20/21 22/23/24 25) 26) 27 | 28) 29) 30/31 
Bits Field Name Description 
If SPU_Status[30], the P bit, which is the stop and signal indication, is set to ‘1’, this field provides a 
copy of bits [18-31] of the SPU stop and signal instruction that caused the SPU stop. 
0:15 sc Bits [0:1] of this field are always set to ‘0’. 
` If SPU_Status[30], the P bit, is not set, data in this field is not valid. 
A stop and signal with dependencies (stopd) instruction, used for debugging, always sets each of 
bits [2:15] to ‘1’. 
16:20 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
, bits read back zero. 
21:22 Reserved Reserved. Software should ignore value read. 
23 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
bits read back zero. 
24 Reserved Reserved. Software should ignore value read. 
25 Reserved Bit is not implemented; bit reads back zero. 
Invalid Instruction Detected. The SPU does not stop precisely, and the SPU Next Program Counter 
Register (SPU_NPC) might not indicate the instruction after the illegal instruction. 
26 l 0 No illegal opcodes have been issued. 
1 An illegal opcode has been issued, and the SPU has been halted. An SPU error interrupt is 
also generated in INT_Class0[61] if enabled in SPU_ERR_Mask[63]. 
SPU Single-Step Status. The SPU Next Program Counter Register (SPU_NPC) points to the next 
instruction after the instructions committed for the single-step operation. 
27 S 0 SPU not stopped due to single-step mode. 
1 SPU stopped after one completed instruction in single-issue mode or a pair of instructions 
in dual-issue mode. 
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Bits Field Name Description 
SPU Wait Status. 
28 Ww 0 SPU is not waiting on a blocked channel. 
1 SPU is waiting on a blocked channel. 
SPU Halt Status. The SPU does not stop precisely, and the SPU Next Program Counter Register 
(SPU_NPC) might not indicate the instruction after the halt instruction. SPU_Status[29] is not set if 
29 H SPU stops due to single step. 
0 SPU is not halted due to a halt instruction. 
1 SPU is halted due to a halt instruction. 
SPU Program Stop and Signal Status. The SPU Next Program Counter Register (SPU_NPC) points 
30 p to the instruction after the committed stop instruction. 
0 SPU is not stopped due to a Stop and Signal instruction. 
1 SPU is stopped due to a Stop and Signal instruction. 
SPU Run Status. 
31 R 0 SPU stopped (idle). 
1 SPU running. 
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3.4.3.5 SPU Next Program Counter Register (SPU_NPC) 


The Local Store Address (LSA) value read from this register is limited by the value of SPU_LSLR[46:48], the 
AMR field. 


A read from this register is only valid when the SPU is stopped (SPU_Status[31] is set to ‘0’). Otherwise, it 
returns meaningless data (all zeros). Values written to this register while the SPU is running have no effect on 
the operation of the SPU and are ignored. SPU Interrupts can only be enabled in this register prior to starting 
the SPU and cannot be enabled while the SPU is running. That is, the internal enable bit gets its value from 
this register when the SPU starts running. When the SPU is stopped, the internal enable bit is loaded to this 
register and may have been changed during program execution by an indirect branch. 
















































































Register Short Name SPU_NPC Privilege Type Problem State 
Access Type MMIO Read/Write Width 32 bits 
Hex Offset From SPEn: x‘044034’ + (x‘80000’ x n) Memory Map Area SPE Problem State 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type CBEA architected register Unit MFC 
ne} 
o 
Z 
o 
n 
NI LSA £ IE 
M viv 4 4 4 
012 3 4 5 6 7 8 9 10 11 12 13/14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29/30) 31 
Bits Field Name Description 
0:13 NI Bits are defined in the Cell Broadband Engine Architecture but are not implemented in the CBE. All 
i bits read back zero. 
14:29 LSA Word-aligned local-store address (LSA). 
30 Reserved Bit is not implemented; bit reads back zero. 
Interrupt enable state. 
31 IE 0 SPU interrupts disabled at start. 
1 SPU interrupts enabled at start. 
Programming Note: SPU_NPC is not valid for an illegal instruction. 
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4. BEI I/O Command (IOC) MMIO Registers 


This section describes the Cell Broadband Engine Interface (BEI) IOC memory-mapped I/O (MMIO) regis- 
ters. Table 4-1 shows the BEI IOC MMIO memory map and lists the BEI IOC registers. The BEI IOC register 
space starts at x‘511C00’ and ends at x‘511FFF’. Offsets are from the start of the BEI IOC register space. For 
the complete CBE MMIO memory map, see Section 1 Cell Broadband Engine Memory-Mapped I/O Registers 
on page 19. 


The following notes apply to the register bit definitions: 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Table 4-1. BEI IOC MMIO Memory Map 




















Hexadecimal Width Read/ 
Offset Register Name and (Short Name) (Bits) | Write Additional Information 
(x‘511 nnn’) 
x‘C00’ IOC IOCmd Configuration Register (IOC_lIOCmd_Cfg) 64 | RW _ Section 4.1 on page 122 
x‘C08’ IOC Memory Base Address Register (IOC_MemBaseAdar) 64 | R/W_ Section 4.2 on page 124 
x‘C10’ IOC Base Address Register 0 (IOC_BaseAdadr0) 64 | R/W Section 4.3 on page 125 
x‘C18’ IOC Base Address Mask Register 0 (IOC_BaseAddrMask0) 64  R/W Section 4.4 on page 126 
x‘C20’ IOC Base Address Register 1 (IOC_BaseAdadr1) 64 — R/W Section 4.5 on page 127 
x‘C28’ IOC Base Address Mask Register 1 (IOC_BaseAddrMask1) 64 — R/W Section 4.6 on page 128 





x‘C30’ — x‘C50’ | Reserved 





IOC SRAM Parity Error Capture Register 
(LIOC_SRAM_ParityErrCap) 


x‘C60’ IOC IOIFO Queue Threshold Register (IOC_IOIFO_QueThshld) 64 — R/W | Section 4.8 on page 130 
x‘C68’ IOC IOIF1 Queue Threshold Register (IOC_IOIF1_QueThshld) 64 | RW Section 4.9 on page 131 
x‘C70’ — x‘FFF’ | Reserved 


x‘C58’ 64 R |Section 4.7 on page 129 
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4.1 IOC l1OCmd Configuration Register (IOC_lOCmd_Cfg) 


This register configures basic settings for the IOC. 


SONY 





















































































































































Register Short Name 1OC_lOCmd_Cfg Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511C00’ Memory Map Area IOC 1/0 Command 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit BEI 
Q 
Q 
| 
Ses 
|OC_Timeout TETK 2 X 8 IOIDO 
M ty a 2 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15|16|17/18|19/20|21 22 23 24 25 26 27 28 29 30 31 
6 3 
| © 2 
g ce s F? Ž 2 
CVCIDO IRO EO $ lOID1 CVCID1 IR1 E1 StaveCntt $ $ £ g EC 
4 an a vv t 44y 7 ee 2 2 yay 
32 33 34/35) 36|37|38 39 40 41 42 43 44 45 46 47 48/49 50 51|52|53|54 55 56 57|58/59/60|61|62 63 
Bits Field Name Description 
Timeout time for commands in InCmd or OutCmd. Only the leftmost bit is used. 
x‘0000’ Disable timeout 
x‘0001’ 216 / (NCIk/2) 
x‘0002’ 217 / (NCIK/2) 
0:15 1OC_Timeout x‘0004" 218 / (NCIk/2) 
x‘0008" 219 / (NCIk/2) 
x‘0010’ 22 / (NCIk/2) 
x‘8000’ 231 / (NCIk/2) 
16 TE Enable I/O address translation. 
17 TK Enable tokens. 
Read-modify-write. 
18 RMW 0 Get one token for all stores. 
1 Get two tokens for stores less than 128 bytes in length. 
16 bytes. 
19 SXT 0 Get one token for all stores. 
1 Get two tokens for stores less than 16 bytes in length. 
Node ID bit for CBE to use in |OTtags for commands being sent on I/O interface 0 (IOIFO). 
20 Node_IDO 0 Use node ID 0. 
1 Use node ID 1. 
21:31 IOIDO I/O ID for CBE to use in commands being sent on IOIFO. 
32:34 CVCIDO CVC ID for CBE to use in commands being sent on IOIFO. 
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Bits Field Name Description 
Enable broadcast interrupt reissue commands seen on the Element Interconnect Bus (EIB) onto 
35 IRO IOIFO 
Enable broadcast of enforce in-order execution of I/O transaction (eieio) commands seen on the 
36 EO 
EIB onto IOIFO. 
Node ID bit for CBE to use in l|OTtags for commands being sent on I/O Interface 1 (IOIF1). 
37 Node_ID1 0 Use node ID 0. 
1 Use node ID 1. 
38:48 IOID1 I/O ID for CBE to use in commands being sent on IOIF1. 
49:51 CVCID1 CVC ID for CBE to use in commands being sent on IOIF1. 
52 IR1 Enable broadcast interrupt reissue commands seen on the EIB onto IOIF1. 
53 E1 Enable broadcast of eieio commands seen on the EIB onto IOIF1. 
. Starvation count for IOIF1. IOIFO has priority over IOIF1 in using the translation logic unless IOIF1 
54:57 StarveCnt1 ears 
has a command waiting for this field’s value of cycles or more. 
Token setup: allow all requests. 
0 Requests for IOIFO tokens are not made by a command until it has obtained all its 
58 AAR 
nonlOIFO tokens. 
1 Allow requests for IOIFO tokens to be made as soon as possible. 
Token setup: allow all assignments. 
59 AAA 0 IOIFO tokens are only assigned to commands that have obtained all their nonlOIFO tokens. 
1 Allow assignments of IOIFO tokens to be made as soon as possible. 
Token setup: disable aging. 
0 Older commands are favored over newer commands within a resource allocation group 
60 NoAge (RAG) 
1 Disable aging. 
Read intervention. 
61 Rdintv 0 Enable putting a ‘0’ in the N bit on a read of 128 bytes. 
1 Enable putting a ‘1’ in the N bit on a read of 128 bytes. 
62:63 Reserved Bits are not implemented; all bits read back zero. 
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4.2 IOC Memory Base Address Register (IOC_MemBaseAddr) 


This register configures the memory base address and mask used by the IOC to determine the real 
addresses that are mapped to memory. For incoming IOIF reads and writes, the IOC determines whether the 
associated real address accesses memory. If memory is accessed, the IOC requests the appropriate memory 
bank token. 

























































































Register Short Name IOC_MemBaseAddr Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511C08’ Memory Map Area IOC 1/0 Command 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit BEI 
Reserved 
b > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
2 
2 
2 
£ MemBase MemMask 
< 
viv vy 4 
32 33/34 35 36 37 38 39 40 41 42 43 44 45 46 47 48|49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:33 Reserved Bits are not implemented; all bits read back zero. 
34:48 MemBase Memory Base Real Address. Assumed to be aligned on a 128 MB boundary. This field represents 
bits [0:14] of the real memory address. 
49:63 MemMask Memory Mask. Only memory sizes that are powers of two are allowed. 
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4.3 IOC Base Address Register 0 (IOC_BaseAddr0) 


This register configures the address and replacement address for I/O adapter 0. 
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Register Short Name 


l|OC_BaseAddrO 


Privilege Type 


Privilege 1 





Access Type 


Hex Offset From 
BE_MMIO_Base 


MMIO Read/Write 


x‘511010’ 


Width 
Memory Map Area 


64 bits 
IOC I/O Command 





Value at Initial POR 


N/A 


Value During POR Set By 


Configuration ring 





Specification Type 








Implementation-specific register 





Unit 





BEI 








Reserved 


BaseRealAddr 
> 








4 y 
























































M 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
ke 
o 
< 
oO 
® 
oc 
2 
a Reserved BaseReplaceAddr 
VY 
32/33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52/53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:21 Reserved Bits are not implemented; all bits read back zero. 
22:32 BaseRealAddr Base real address. Specifies a base real address for accesses that are routed to IOIFO. 
33:52 Reserved Bits are not implemented; all bits read back zero. 
i Base replacement address. Specifies the value to replace part or all of the base real address that is 
53:63 BaseReplaceAddr passed to IOIFO. 
Version 1.5 BEI I/O Command (IOC) MMIO Registers 


April 2, 2007 


Page 125 of 357 


Registers 


Cell Broadband Engine 


4.4 IOC Base Address Mask Register 0 (IOC_BaseAddrMask0) 


This register configures the address mask for I/O adapter 0. 
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Register Short Name 


l|OC_BaseAddrMaskO 


Privilege Type 


Privilege 1 





Access Type 


MMIO Read/Write 


Width 


64 bits 
IOC I/O Command 















































Hex Offset From x‘511018’ Memory Map Area 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By Configuration ring 
Specification Type Implementation-specific register | Unit BEI 
E Reserved Mask 
> 
y% y vy 
0/1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
3 
Ss Reserved 
Vy y 





32/33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 





























Bits Field Name Description 
0 E When set, enables passing accesses to IOIFO. 
1:21 Reserved Bits are not implemented; all bits read back zero. 
22:32 Mask Mask. Specifies the size of the address range that is routed to IOIFO. 
33:63 Reserved Bits are not implemented; all bits read back zero. 








BEI I/O Command (IOC) MMIO Registers 


Page 126 of 357 


Version 1.5 
April 2, 2007 


SONY 


SONY 


SAMMI © 


4.5 IOC Base Address Register 1 (IOC_BaseAddr1) 


This register configures the address and replacement address for I/O adapter 1. 
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Register Short Name 


l|OC_BaseAdar1 


Privilege Type 


Privilege 1 





Access Type 


Hex Offset From 
BE_MMIO_Base 


MMIO Read/Write 
x‘511C20’ 


Width 
Memory Map Area 


64 bits 
IOC I/O Command 





Value at Initial POR 


N/A 


Value During POR Set By 


Configuration ring 





Specification Type 








Implementation-specific register 





Unit 





BEI 








Reserved 


BaseRealAddr 
> 








4 y 
























































M 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
ke 
o 
< 
oO 
® 
oc 
2 
a Reserved BaseReplaceAddr 
VY 
32/33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52/53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:21 Reserved Bits are not implemented; all bits read back zero. 
22:32 BaseRealAddr Base real address. Specifies a base real address for accesses that are routed to IOIF1 
33:52 Reserved Bits are not implemented; all bits read back zero. 
i Base replacement address. Specifies the value to replace part or all of the base real address that is 
53:63 BaseReplaceAddr passed to IOIF1. 
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This register configures the address mask for I/O adapter 1. 
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Register Short Name 


l|OC_BaseAddrMask1 


Privilege Type 


Privilege 1 





Access Type 


MMIO Read/Write 


Width 


64 bits 





IOC I/O Command 












































Hex Offset From x‘511C028’ Memory Map Area 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By = Configuration ring 
Specification Type Implementation-specific register | Unit BEI 
E Reserved Mask 
> 
4 y vy 
0/1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
E 
Ss Reserved 
4y y 





32/33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
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Bits Field Name Description 
0 E When set, enables passing accesses to IOIF1. 
1:21 Reserved Bits are not implemented; all bits read back zero. 
22:32 Mask Specifies the size of the address range that is routed to IOIF1. 
33:63 Reserved Bits are not implemented; all bits read back zero. 
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4.7 IOC SRAM Parity Error Capture Register (IOC_SRAM_ParityErrCap) 


This is a read-only register for software that is used to determine the cause of outbound command errors. 


































































































Register Short Name 1OC_SRAM_ParityErrCap Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘511C58’ Memory Map Area IOC 1/0 Command 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit BEI 
SRAM_ParErrO lO_DtagO SRAM_AddrO SRAM_ParErr1 
y yy y Vy > 
012 3 4 5 6 7 8/9 10 11 12 13 14 15/16 17 18 19 20 21 22 23/24 25 26 27 28 29 30 31 
i] 
j 
= 
<x 
T IO_Dtag1 SRAM_Addr1 Reserved 
Vy Vy Vy y 
32/33 34 35 36 37 38 39/40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
IOIFO static random access memory (SRAM) parity error. 
0:8 SRAM_ParErrO bits [0:7] HWn (where n = 0 through 7) parity error 
bit [8] Control field parity error 
9:15 1O_DtagO IOIFO I/O tag of command with parity error. 
16:23 SRAM_AddrO IOIFO SRAM address that had parity error. 
IOIF1 SRAM parity error. 
24:32 SRAM_ParErr1 bits [24:31] HWn (where n = 0 through 7) parity error 
bit [32] Control field parity error 
33:39 1O_Dtag1 IOIF1 I/O tag of command with parity error. 
40:47 SRAM_Adar1 IOIF1 SRAM address that had parity error. 
48:63 Reserved Bits are not implemented; all bits read back zero. 
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4.8 IOC IOIFO Queue Threshold Register (IOC_IOIFO_QueThshld) 


This register configures the resource allocation back-pressure threshold values for IOIFO command queue 














































































































entries. 
Register Short Name IOC_IOIFO_QueThshld Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511C60' Memory Map Area IOC 1/0 Command 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit BEI 
O E] 
o o 
2 Z 
(o) ®o 
no no 
Reserved T1IN £ T2IN £ T3IN 
4 vy 4t 4 y 4t 4 y 4 
0 1 2 3 4 5 6 7 8/9 10 11 12 13 14 15/16/17 18 19 20 21 22 23|24|25 26 27 28 29 30 31 
ke] ke] 
o o 
Z pa 
®o oO 
no no 
Reserved T1OUT £ T2OUT £ T30UT 
M vv vv y4 vv y4 4 
32 33 34 35 36 37 38 39 40 | 41 42 43 44 45 46 47 | 48 | 49 50 51 52 53 54 55 | 56 | 57 58 59 60 61 62 63 
Bits Field Name Description 
0:8 Reserved Bits are not implemented; all bits read back zero. 
9:15 THIN Threshold 1 for IOIFO command queue entries that require the IOIFO In bus for a data transfer. This 
' value is inverted, so that for a threshold of x‘05’, a value of x‘7A’ should be loaded. 
16 Reserved Bits are not implemented; all bits read back zero. 
17:23 TOIN Threshold 2 for |OIFO command queue entries that require the IOIFO In bus for a data transfer. This 
: value is inverted, so that for a threshold of x‘05’, a value of x‘7A’ should be loaded. 
24 Reserved Bit is not implemented; bit reads back zero. 
25:31 T3IN Threshold 3 for IOIFO command queue entries that require the IOIFO In bus for a data transfer. This 
` value is inverted, so that for a threshold of x‘05’, a value of x‘7A’ should be loaded. 
32:40 Reserved Bits are not implemented; all bits read back zero. 
41:47 T10UT Threshold 1 for IOIFO command queue entries that require the IOIFO Out bus for a data transfer. 
` This value is inverted, so that for a threshold of x‘05’, a value of x‘7A’ should be loaded. 
48 Reserved Bits are not implemented; all bits read back zero. 
49:55 T20UT Threshold 2 for IOIFO command queue entries that require the IOIFO Out bus for a data transfer. 
; This value is inverted, so that for a threshold of x‘05’, a value of x‘7A’ should be loaded. 
56 Reserved Bits are not implemented; all bits read back zero. 
57:63 T30UT Threshold 3 for IOIFO command queue entries that require the IOIFO Out bus for a data transfer. 
í This value is inverted, so that for a threshold of x‘05’, a value of x‘7A’ should be loaded. 
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4.9 IOC IOIF1 Queue Threshold Register (IOC_IOIF1_QueThshld) 
This register configures the resource allocation back-pressure threshold values for IOIF1 command queue 


entries. This register configures the maximum credits allowed for both inbound and outbound commands on 
IOIFO and IOIF1. 







































































Register Short Name IOC_IOIF1_QueThshld Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511C68’ Memory Map Area IOC 1/0 Command 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit BEI 
O O 
o o 
> > 
o] o] 
N N 
Reserved T1IN £ T2IN kd T3IN 
Y Y y tyy t4 y 4 
0 1 234 5 6 7 8|9 10 11 12 13 14 15|16|17 18 19 20 21 22 23|24|25 26 27 28 29 30 31 
O ge] 
o o 
z z 
2 B 
Reserved T1OUT £ T2OUT £ T30UT 
y vy Vvy Vvy 4 





32 33 34 35 36 37 38 39 40/41 42 43 44 45 46 47|48|49 50 51 52 53 54 55 





















































56/57 58 59 60 61 62 63 
Bits Field Name Description 
0:8 Reserved Bits are not implemented; all bits read back zero. 
9:15 THIN Threshold 1 for IOIF1 command queue entries that require the IOIF1 In bus for a data transfer. This 
value is inverted, so that for a threshold of x‘05’, a value of x‘3A’ should be loaded. 
16 Reserved Bits are not implemented; all bits read back zero. 
17:23 TOIN Threshold 2 for IOIF1 command queue entries that require the IOIF1 In bus for a data transfer. This 
` value is inverted, so that for a threshold of x‘05’, a value of x‘3A’ should be loaded. 
24 Reserved Bits are not implemented; all bits read back zero. 
25:31 T3IN Threshold 3 for IOIF1 command queue entries that require the IOIF1 In bus for a data transfer. This 
` value is inverted, so that for a threshold of x‘05’, a value of x‘3A’ should be loaded. 
32:40 Reserved Bits are not implemented; all bits read back zero. 
41:47 T1OUT Threshold 1 for IOIF1 command queue entries that require the IOIF1 Out bus for a data transfer. 
` This value is inverted, so that for a threshold of x‘05’, a value of x‘3A’ should be loaded. 
48 Reserved Bits are not implemented; all bits read back zero. 
49:55 T2OUT Threshold 2 for IOIF1 command queue entries that require the IOIF1 Out bus for a data transfer. 
f This value is inverted, so that for a threshold of x‘05’, a value of x‘3A’ should be loaded. 
56 Reserved Bits are not implemented; all bits read back zero. 
57:63 T30UT Threshold 3 for IOIF1 command queue entries that require the IOIF1 Out bus for a data transfer. 











This value is inverted, so that for a threshold of x‘05’, a value of x‘3A’ should be loaded. 
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5. IOC Address Translation MMIO Registers 


This section describes the I/O Command (IOC) address translation memory-mapped I/O (MMIO) registers. 
Table 5-1 shows the IOC address translation MMIO memory map and lists the IOC registers. The IOC 
address translation space starts at x‘510000’ and ends at x‘510FFF’. Offsets are from the start of the IOC 
address translation register space. For the complete CBE MMIO memory map, see Section 1 Cell Broadband 
Engine Memory-Mapped I/O Registers on page 19. 


The following notes apply to the register bit definitions: 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Table 5-1. IOC Address Translation MMIO Memory Map 
























































Hexadecimal Width Read/ 
Offset Register Name and (Short Name) (Bits) Write Additional Information 
(x‘510nnn’) 
IOC Address Translation 
x‘000'—x!1 8" IOC IOPT Cache Directory Register (IOC_IOPT_CacheDir) 64 R/W | Section 5.1 on page 134 
(First way) 
x‘200'—x'3F8" IOC IOPT Cache Directory Register (IOC_IOPT_CacheDir) 64 R/W | Section 5.1 on page 134 
(Second way) 
x‘400'—x'5F8’ IOC IOPT Cache Directory Register (IOC_IOPT_CacheDir) 64 R/W | Section 5.1 on page 134 
(Third way) 
x'600'—x'7F8" IOC IOPT Cache Directory Register (IOC_IOPT_CacheDir) 64 R/W | Section 5.1 on page 134 
(Fourth way) 
x‘800’-x‘8F8’ | /OC IOST Cache Register (IOC_IOST_Cache) 64 R/W Section 5.2 on page 135 
x‘900’ IOC IOST Cache Invalidate Register (IOC_IOST_Cachelnvd) 64 R/W | Section 5.3 on page 136 
x‘908’ IOC IOPT Cache Invalidate Register (IOC_IOPT_Cachelnvd) 64 R/W | Section 5.4 on page 137 
x‘910’ IOC IOPT Cache Register (IOC_IOPT_Cache) 64 R/W | Section 5.5 on page 138 
x‘918" IOC IOST Origin Register (IOC_IOST_Origin) 64 R/W Section 5.6 on page 139 
x‘920’ IOC I/O Exception Status Register (IOC_IO_ExcpStat) 64 R/W | Section 5.7 on page 140 
x‘928’ IOC I/O Exception Mask Register (IOC_IO_ExcpMask) 64 R/W | Section 5.8 on page 141 
x‘930’ IOC Translation Configuration Register (IOC_XlateCfg) 64 R/W Section 5.9 on page 142 
x‘931’-x‘FFF’ | Reserved 
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5.1 IOC IOPT Cache Directory Register (IOC_lIOPT_CacheDir) 


The I/O page table (IOPT) cache and its directory have 64 sets with 4-way associativity, for a total of 256 
entries. When an IOPT cache directory entry is read, the IOPT cache register is automatically loaded from the 
corresponding IOPT cache entry. When an IOPT cache directory entry is written, the corresponding IOPT 
cache entry is automatically written from the IOPT cache register. 








Register Short Name IOC_IOPT_CacheDir Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘510000’ — x‘5101F8’: First way Memory Map Area IOC Address Translation 
BE_MMIO_Base x‘510200’ — x‘5103F8’: Second 
way 


x‘510400’ — x‘5105F 8’: Third way 
x‘510600’ — x‘5107F8’: Fourth 





























way 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 
D 
Reserved V Æ 
4 viv 





012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29/30) 31 














Tag 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 









































Bits Field Name Description 
0:29 Reserved Bits are not implemented; all bits read back zero. 
Valid. 
30 V 0 The IOPT cache entry is not valid. 
1 The IOPT cache entry is valid. 
31:63 Tag IOPT directory tag. 
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5.2 IOC IOST Cache Register (IOC_IOST_Cache) 


The I/O segment table (IOST) Cache Register is a direct-mapped cache with 32 entries. From an MMIO 

standpoint, the IOST cache directory is considered to be part of the IOST cache. The fields in the IOST cache 
register have the same meaning as the corresponding fields in the IOST cache. However, there is no hint bit 
in the register. Only 30 bits of the IOPT base real page number (RPN) are implemented. Also, the register V 
and Tag fields are fields in the IOST cache directory, so there are no corresponding fields in the IOST cache. 






































Register Short Name IOC_IOST_Cache Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From i MEE : Memory Map Area : 
BE MMIO Base x‘510800’ — x‘5108F8 IOC Address Translation 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 

ge] 

o 

2 

D 
V € Tag Reserved IOPT_Base_RPN 
Lir‘ vy > 
0|/1/2]/3]|4 


5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21|22 23 24 25 26 27 28 29 30 31 




















ne} 
o 
Z 
D 
IOPT_Base_RPN NPPT £ PS 
‘ vy YY vy 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51/52 53 54 55 56 57 58/59 60/61 62 63 
Bits Field Name Description 
Valid. 
0 V 0 IOST cache entry is not valid. 
1 IOST cache entry is valid. 
1 Reserved Bits are not implemented; all bits read back zero. 
2:3 Tag IOST directory tag. 
4:21 Reserved Bits are not implemented; all bits read back zero. 
22:51 IOPT_Base_RPN I/O page table base real page number. 


This is the 4 KB RPN of the first entry in the I/O page table for this I/O segment. 





Number of 4 KB pages in the IOPT for this I/O segment minus one. 


52:58 NPPT For lOPT format 1, the number of IOPT entries for the segment is equal to 512 times the sum of the 
` NPPT plus 1. The IOPT entries are for the lowest-numbered pages in the segment. For IOPT format 
2, the number of IOPT entries for the segment is equal to 256 times the sum of the NPPT plus 1. 


59:60 Reserved Bits are not implemented; all bits read back zero. 





Page size of the RPN in the IOPT entry. 


That is, this field describes the page size of the pages in this I/O segment. The page size is 4PS KB. 
61:63 PS Only page sizes of 4 KB, 64 KB, 1 MB, and 16 MB are supported. PS values of 1, 3, 5, and 7 are 
supported. All four page sizes can be used, regardless of the sizes used by the PowerPC Processor 
Element (PPE) and Synergistic Processor Element (SPE). 
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5.3 IOC IOST Cache Invalidate Register (IOC_lIOST_Cachelnvd) 


This register allows software to invalidate the IOST cache. 


















































Register Short Name IOC_IOST_Cachelnvd Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘510900’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 
a 
| 
E 
o 
a 
D 
oO 
a 
Reserved o 
4 4 J > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 
lO_Segment_ID Reserved B 
< 
4 y y y 





32 33 34 35/36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62/63 












































Bits Field Name Description 
0:28 Reserved Bits are not implemented; all bits read back zero. 
29:35 lO_Segment_ID This is the I/O segment ID to be invalidated in the IOST cache. 
36:62 Reserved Bits are not implemented; all bits read back zero. 
Busy 
63 B 0 The IOST segment invalidate operation is complete. 
1 The IOST segment invalidate operation is in progress. 
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5.4 IOC IOPT Cache Invalidate Register (IOC_lIOPT_Cachelnvd) 


This register allows software to invalidate entries in the IOPT cache that correspond to the specified IOPT 
entries. 



























































Register Short Name IOC_IOPT_Cachelnvd Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘510908’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit Xlate 
NE Reserved IOPTE_DRA 
y vy Vy > 
0 1 2 3 4 5 6 7 8 9 10|11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
8 
> 
o 
N 
IOPTE_DRA 2 B 
“ LER. 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60/61 62/63 














Bits Field Name Description 








0:10 NE Number of entries. The value in this field is one less than the number of entries in the IOPT for 
` which IOPT cache entries are to be invalidated. 





11:21 Reserved Bits are not implemented; all bits read back zero. 





I/O page table entry doubleword real address. 


22:60 IOPTE DRA (IOPTE_DRA concatenated with ‘000’) is the real address of the first IOPT entry to be invalidated. 
í = All entries at or between (IOPTE_DRA concatenated with ‘000’) and ((IOPTE_DRA + NE) concate- 
nated with ‘000’) are invalidated. 























61:62 Reserved Bits are not implemented; all bits read back zero. 
Busy. 
63 B 0 The IOPT cache invalidate operation is complete. 
1 The IOPT cache invalidate operation is in progress. 
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5.5 IOC IOPT Cache Register (IOC_IOPT_Cache) 


The fields in the IOPT cache register have the same meaning as the corresponding fields in the IOPT. 
However, only 30 bits of RPN are implemented. When the IOPT cache directory entry is written, the contents 
of the IOPT cache register are moved into the corresponding IOPT cache entry. When an IOPT cache direc- 
tory entry is read, the IOPT cache register is loaded from the corresponding IOPT cache entry. 









































Register Short Name IOC_IOPT_Cache Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘510910’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 
PP M SO Reserved RPN 
vvryyyy Vy 
O 1/23 4)5 














6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 








RPN H IOID 


LC y 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51|52|53 54 55 56 57 58 59 60 61 62 63 















































Bits Field Name Description 
Page Protection 
00 No access 
0:1 PP 01 Read access 
10 Write access 
11 Read and write access 
Coherency required. 
2 M 0 Not required 
1 Required 
Storage ordering. 
00 Ordered only if the I/O device identifier (OID), I/O virtual channel (VC), and I/O address 
match. 
3:4 SO 01 Ordered only if the IOID, I/O VC, and I/O address match. 
10 Ordered only if the IOID, I/O VC, and I/O address match, or IOID and VC match and the 
previous command is a write. 
11 Ordered if the IOID and VC match. 
5:21 Reserved Bits are not implemented; all bits read back zero. 
22:51 RPN Real page number of the translated I/O address. 
52 H Hint enable. 
. I/O device identifier. Only the I/O device specified can have its I/O address translated using this 
53:63 IOID IOPT entry 
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5.6 IOC IOST Origin Register (IOC_IOST_Origin) 


This register sets up the I/O translation mechanism in the IOC. The IOST Size field is not implemented. When 
I/O translation is enabled and hardware miss handling is enabled, the IOST is treated as having a fixed size 
with 128 entries. 



































Register Short Name 1OC_IOST_Origin Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘510918’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 

E Reserved IOST_Origin 


4 y Vv 
0/1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21)22 23 24 25 26 27 28 29 30 31 

















IOST_Origin = HL Reserved 


Vvyvy 4 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51|52|53|54 55 56 57 58 59 60 61 62 63 





























Bits Field Name Description 
I/O translation enable. The IOC_IOCmd_Cfg[TE] must be set to the same value as this E bit. 
0 Disabled. I/O addresses are treated as real addresses. The I/O address translation unit is 
0 E disabled to save power. This is the only IOC address translation MMIO register that can be 
accessed. 
1 Enabled. I/O addresses are translated using the IOST and IOPTs. 
1:21 Reserved Bits are not implemented; all bits read back zero. 
22:51 IOST_Origin The real page number (RPN) of the IOST. The IOST must be integrally aligned and must be aligned 


on a 4 KB page. 





52 HW Enable hardware miss handling for IOST and IOPT caches. 





Hint lock for IOST and IOPT caches. 


0 The hint bit for an IOST or IOPT cache entry is treated as a hint for valid entries. If there 
are no invalid entries in the applicable congruence class, hardware miss handling should 
replace an entry whose hint bit is ‘0’ instead of an entry whose hint bit is ‘1’. If there are no 

53 HL invalid entries in the congruence class and all entries in the congruence class have hint 
bits equal to ‘1’, hardware miss handling replaces a cache entry whose hint bit is ‘1’. 

1 The hint bit is treated as a lock. If hardware miss handling is enabled and an IOST or IOPT 
cache miss occurs, hardware must not replace a cache entry whose hint bit is ‘1’, even if 
the valid (V) bit in the entry is ‘0’. 





54:63 Reserved Bits are not implemented; all bits read back zero. 
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5.7 IOC I/O Exception Status Register (IOC_IO_ExcpStat) 


When an I/O exception occurs, debug information is captured in this register, and then IOC_IO_ExcpStat[0] 
is set to ‘1’. Debug information for an I/O exception is only captured when IOC_IO_ExcpStat[0] is set to ‘0’. 
After handling an I/O exception, software should set IOC_IO_ExcpStat[0] to ‘0’ to enable the capturing of 
information on a subsequent I/O exception. 






















































































Register Short Name 1OC_IO_ExcpStat Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘510920’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 
V SPF Reserved Address 
> 
44y vv 
loļ1 2/3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28/29 30 31 
Address = IOID 
< 4y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51/52/53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Valid. Software must set this bit to ‘0’ after handling the exception. 
0 V 0 Errors that occur when V is set to ‘0’ are not captured. 
1 The I/O Exception Status Register contains error status for the first error detected. 
Segment or page fault exception. 
The following values assume that bits [1:2] were set to ‘00’ before the exception occurred. 
4:2 SPF 00 No I/O address translation fault occurred. 
` 01 An I/O page fault occurred. 
10 Undefined. 
11 An I/O segment fault occurred. 
3:28 Reserved Bits are not implemented; all bits read back zero. 
29:51 Address Bits [7:29] of the 42-bit I/O address are used for the access that caused the I/O exception. 
Read or write type of I/O access. 
52 RW 0 Write 
1 Read 
53:63 IOID I/O device identifier. 
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5.8 IOC I/O Exception Mask Register (IOC_IO_ExcpMask) 


This register configures the mask for interrupts due to I/O exceptions. These masks do not affect the setting 
of the I/O Exception Status Register (IOC_IO_ExcpStat). 




























































































Register Short Name IOC_IO_ExcpMask Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘510928’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 

Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 

ne} 

o 

Z 

2 u w 

con Reserved 

v4 4y 

0/1/2/3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 

Reserved 

F 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 

Bits Field Name Description 

0 Reserved Bits are not implemented; all bits read back zero. 
1 SFE I/O segment fault mask exception enable 
2 PFE I/O page fault mask exception enable 
3:63 Reserved Bits are not implemented; all bits read back zero. 
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5.9 IOC Translation Configuration Register (IOC_XlateCfg) 


This register configures the retry backoff prescaler and power management of the I/O translation (Xlate) hard- 
ware. 
























































Register Short Name IOC_XlateCfg Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘510930’ Memory Map Area IOC Address Translation 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit IOC 
Retry_Prescaler Debug_Control P Reserved 
4 vy yy > 
O 1 2 3/4 5 6 7/8/9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 





Bits Field Name Description 








Prescaler for the decrement value used to determine the amount of time before re-issuing an ele- 
ment interconnect bus (EIB) read after a Retry combined response. 

The first 2 bits of this field are used to select which decrement of the Linear Feedback Shift Register 
(LFSR) backoff to apply. The next 2 bits are used to select the LFSR sequence length. 


Encode Decrement Rate LFSR Sequence Length 
00x 1:1 
0:3 Retry_Prescaler 01x 1:2 
10x 1:4 
11x 1:8 
x00 281 
x01 317 
x10 439 
x11 487 





Debug control. Nonzero values indicate conditions that halt the I/O translation (Xlate) hardware. 

0000 Never halt 

0001 I/O segment fault or I/O page fault occurs 

0010 I/O address translation exception interrupt is signalled to the internal interrupt controller 
(IIC) 

0011 Write to the IOPT Cache Invalidate Register that invalidates way 0 

0100 Write to the IOPT Cache Invalidate Register that invalidates way 1 

0101 Write to the IOPT Cache Invalidate Register that invalidates way 2 

4:7 Debug_Control 0110 Write to |OPT Cache Invalidate Register that invalidates way 3 

0111 Write to the IOST cache 

1000 Write to the IOPT cache directory for the first way 

1001 Write to the IOPT cache directory for the second way 

1010 Write to the IOPT cache directory for the third way 

1011 Write to the IOPT cache directory for the fourth way 

1100 lIOST cache miss or IOPT cache miss occurs on I/O translation 

1101  Xlate hardware issues a “clear” to XIN logic 

All values not shown above are invalid. 
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Bits Field Name Description 
Power management control for I/O translation (Xlate) hardware. 
0 Enable latches. 
8 P 1 Disable latches. When this bit is disabled, all latches in the Xlate hardware are disabled. 
The Xlate hardware can be re-enabled by asserting the HARD_RESET# signal to reset the 
Cell Broadband Engine. 
9:63 Reserved Bits are not implemented; all bits read back zero. 
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6. Internal Interrupt Controller (IIC) MMIO Registers 


This section describes the IIC memory-mapped I/O (MMIO) registers. Table 6-1 shows the IIC address trans- 
lation MMIO memory map and lists the IIC registers. The internal interrupt controller (IIC) space starts at 
x‘508000’ and ends at x‘5084FF’. Offsets are from the start of the IIC register space. For the complete CBE 
MMIO memory map, see Section 1 Cell Broadband Engine Memory-Mapped I/O Registers on page 19. 
The following notes apply to the register bit definitions: 

e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


6.1 IIC MMIO Memory Map 
Table 6-1. IIC Memory Map (Page 1 of 2) 















































Hexadecimal : 
Offset Register Name and (Short Name) Ba ie Additional Information 
(x‘508nnr’) 
x‘000’ — x‘3FF’ Reserved 
anny IIC Thread 0 Interrupt Pending Port Register (IIC_IPPO) > 

x‘400 (nondestructive) 64 R |Section 6.2.1 on page 147 

x'408" IIC Thread 0 Interrupt Pending Port Register (IIC_IPPO) 64 R Section 6.2.1 on page 147 
(destructive) 

Daa IIC Thread 0 Interrupt Generation Port Register s 

x‘410 (IIC_IGPO) 64 W | Section 6.2.2 on page 148 

x‘418° IIC Thread 0 Current Priority Level Register (IIC_CPLO) | 64 | R/W | Section 6.2.3 on page 149 

x420 IIC Thread 1 Interrupt Pending Port Register (IIC_IPP1) 64 R Section 6.2.4 on page 150 
(nondestructive) 

x'428" IIC Thread 1 Interrupt Pending Port Register (IIC_IPP1) 64 R Section 6.2.4 on page 150 
(destructive) 

x'430’ IIC Thread 1 Interrupt Generation Port Register 64 W | Section 6.2.5 on page 151 
(IIC_IGP1) 

x438’ IIC Thread 1 Current Priority Level Register (IIC_CPL1) | 64 | R/W | Section 6.2.6 on page 152 

x‘440’ IIC Interrupt Routing Register (IIC_IR) 64 | RW _ Section 6.2.7 on page 153 

x‘448’ lIC_Interrupt Status Register (IIC_IS) 64 | RW _ Section 6.2.8 on page 154 

x‘450’ — x‘4FF’ Reserved 
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Hexadecimal 

















Offset Register Name and (Short Name) Ba itil Additional Information 
(x‘508nnn’) 
x‘500’ IOC Fault Isolation Register Reset 
x‘508’ IOC Fault Isolation Register Set 
x‘510’ IOC Checkstop Enable Register 
x518 IOC Fault Isolation Error Mask Register 64 R/W | Section A.11 on page 345 
x‘520' IOC System Error Enable Register 
x‘'528’ IOC Fault Isolation Register 
x‘530’ — x‘FFF’ | Reserved 
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6.2 IIC Register Descriptions 


6.2.1 IIC Thread 0 Interrupt Pending Port Register (IIC_IPPO) 


The IIC_IPPO Register allows software to read the interrupt source and other information about any pending 
interrupts. After software reads the pending port, the next highest interrupt is loaded into the Interrupt 
Pending Port (IPP). When reading the IPP nondestructively, the value of the associated Current Priority Level 
(CPL) Register (IIC_CPLO) is not updated with the interrupt in the IPP. When reading the IPP destructively, 
the CPL Register takes on the priority of the interrupt in the IPP. The destructive read address offset is always 
8 bytes beyond the nondestructive read offset. 


























































































































Register Short Name _|IC_IPPO Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘508400’ Nondestructive Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base x‘508408’ Destructive 
Value at Initial POR All bits set to zero Value During POR Scan initialization during POR 
Set By 
Specification Type Implementation-specific register Unit IIC 
Reserved 
v 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
V T Reserved Class Src_Node_ID Src_Unit_ID Priority Reserved 
yt y¥ WRA. Vy + ¥ + ¥ 4 
32 |33 |34 35 36 37 38 39 40 41 42 43 44 45|46 47/48 49 50 51/52 53 54 55/56 57 58 59/60 61 62 63 
Bits Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
Interrupt Valid 
32 V 0 No interrupt pending. 
1 Interrupt pending. 
Interrupt Type 
33 T 0 Interrupt from Synergistic Processor Element (SPE), external device, or external interrupt 
controller 
1 Interrupt from thread 0 Interrupt Generation Port 
34:45 Reserved Bits are not implemented; all bits read back zero. 
46:47 Class Interrupt Class. Returns zeros when T = ‘1’. 
48:51 Src_Node_ID Interrupt Source Cell Broadband Engine Interface (BIF) Node ID. Returns zeros when T = ‘1’. 
52:55 Src_Unit_ID Interrupt Source Unit ID. Returns zeros when T = ‘1’. 
56:59 Priority Interrupt Priority 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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6.2.2 IIC Thread 0 Interrupt Generation Port Register (IIC_IGPO) 
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The IIC_IGPO Register allows software to generate interrupts to PowerPC Processor Element (PPE) 








thread 0. 
Register Short Name IIC_IGPO Privilege Type Privilege 1 
Access Type MMIO Write Only Width 64 bits 





Hex Offset From 
BE_MMIO_Base 


x‘508410’ 


Memory Map Area 


Internal Interrupt Controller (IIC) 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 








Specification Type 





Implementation-specific register 





Unit 





IIC 








Reserved 


o O 
























































O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved Priority Reserved 
< 
viv viv 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55/56 57 58 59|60 61 62 63 
Bits Field Name Description 
0:55 Reserved Bits are not implemented; all bits read back zero. 
56:59 Priority Interrupt Priority 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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6.2.3 IIC Thread 0 Current Priority Level Register (IIC_CPLO) 


The IIC_CPLO Register allows software to mask interrupts of a specified priority. Software directly loads the 
CPL using an MMIO write of the register or indirectly using a destructive read of the IPP. When executing a 
destructive read of the IPP, the priority of the interrupt in the IPP is written to the CPL if that interrupt is valid. 
Otherwise, the content is unchanged. 












































Register Short Name IIC_CPLO Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘508418’ Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit IIC 
Reserved 
D > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved Priority Reserved 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55/56 57 58 59 60/61 62 63 












































Bits Field Name Description 
0:55 Reserved Bits are not implemented; all bits read back zero. 
56:60 Priority i the priority of the interrupt in the IIC_IPPO register is numerically less than the priority in this regis- 
er, then the thread 0 external interrupt signal to the PPU is active. 
61:63 Reserved Bits are not implemented; all bits read back zero. 
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6.2.4 IIC Thread 1 Interrupt Pending Port Register (IIC_IPP1) 


The IIC_IPP1 Register allows software to read the interrupt source and other information about any pending 
interrupts. After software reads the pending port, the next highest interrupt is loaded into the IPP. When 
reading the IPP nondestructively, the value of the associated Current Priority Level (CPL) Register 
(IIC_CPL1) is not updated with the interrupt in the IPP. When reading the IPP destructively, the CPL Register 
takes on the priority of the interrupt in the IPP. The destructive read address offset is always 8 bytes beyond 
the nondestructive read offset. 








































































































Register Short Name IIC_IPP1 Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘508420’ Nondestructive Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base x‘508428’ Destructive 
Value at Initial POR All bits set to zero Value During POR Scan initialization during POR 
Set By 
Specification Type Implementation-specific register Unit IIC 
Reserved 
v 4 
lo 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31| 
V T Reserved Class Src_Node_ID Src_Unit_ID Priority Reserved 
L4 teď v4 Vy Vy 4 
32 | 33 |34 35 36 37 38 39 40 41 42 43 44 45/46 47/48 49 50 51/52 53 54 55/56 57 58 59|60 61 62 63 
Bits Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
Interrupt Valid 
32 V 0 No interrupt pending 
1 Interrupt pending 
Interrupt Type 
33 T 0 Interrupt from Synergistic Processor Element (SPE), external device, or external interrupt 
controller 
1 Interrupt from thread 1 Interrupt Generation Port 
34:45 Reserved Bits are not implemented; all bits read back zero. 
46:47 Class Interrupt Class. Returns zeros when T = ‘1’. 
48:51 Src_Node_ID Interrupt Source Cell Broadband Engine Interface (BIF) Node ID. Returns zeros when T = ‘1’. 
52:55 Src_Unit_ID Interrupt Source Unit ID. Returns zeros when T = ‘1’. 
56:59 Priority Interrupt Priority 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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6.2.5 IIC Thread 1 Interrupt Generation Port Register (IIC_IGP1) 


The IIC_IGP1 Register allows software to generate interrupts to PowerPC Processor Element (PPE) 
thread 1. 

























































































Register Short Name IIC_IGP1 Privilege Type Privilege 1 
Access Type MMIO Write Only Width 64 bits 
Hex Offset From x‘508430’ Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit IIC 
Reserved 
D > 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved Priority Reserved 
<4 
vv vv 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55/56 57 58 59|60 61 62 63 
Bits Field Name Description 
0:55 Reserved Bits are not implemented; all bits read back zero. 
56:59 Priority Interrupt Priority 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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6.2.6 IIC Thread 1 Current Priority Level Register (IIC_CPL1) 


The IIC_CPL1 Register allows software to mask interrupts of a specified priority. Software directly loads the 
CPL using an MMIO write of the register or indirectly using a destructive read of the IPP. When executing a 
destructive read of the IPP, the priority of the interrupt in the IPP is written to the CPL if that interrupt is valid. 
Otherwise, the content is unchanged. 












































Register Short Name IIC_CPL1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘508438’ Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit IIC 
Reserved 
D > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved Current_Priority Reserved 


A a a 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55/56 57 58 59 60/61 62 63 












































Bits Field Name Description 
0:55 Reserved Bits are not implemented; all bits read back zero. 
. os If the priority of the interrupt in the IIC_IPP1 is numerically less than the priority in this register, then 
36:60 Current_Priority the thread 1 external interrupt signal to the PPU is active. 
61:63 Reserved Bits are not implemented; all bits read back zero. 
Internal Interrupt Controller (IIC) MMIO Registers Version 1.5 


Page 152 of 357 April 2, 2007 


SONY 


SONY “> Registers 


SRM © 


Cell Broadband Engine 
6.2.7 IIC Interrupt Routing Register (IIC_IR) 


The IIC_IR Register configures the priority and destination of interrupts in the IIC_IS Register. 
















































































Register Short Name IIC_IR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘508440’ Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit IIC 
Reserved 
i > 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved Priority Reserved Dst_Node_ID Dst_Unit_ID 
< yy yy yy Vy y 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47/48 49 50 51/52 53 54 55/56 57 58 59/60 61 62 63 
Bits Field Name Description 
0:47 Reserved Bits are not implemented; all bits read back zero. 
48:51 Priority eee a This field corresponds to the 4 bits of the priority field in the IIC_IPPO and 
52:55 Reserved Bits are not implemented; all bits read back zero. 
56:59 Dst_Node_ID Destination Node BIF ID for interrupts in the IIC_IS register. 





Destination Unit ID for interrupts in the IIC_IS register. Interrupt packets routed to I/O Interface 0 
(IOIFO) have the same destination unit ID as I/O Controller 0 (IOCO). Those that are routed to I/O 
Interface 1 (IOIF1) have the same destination unit ID as |OC1. The valid values are: 

60:63 Dst_Unit_ID 0000 IOCO 

1011 I/O Controller 1 (IOC1) 

1110 Processor thread 0 

1111 Processor thread 1 
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6.2.8 IIC_Interrupt Status Register (IIC_IS) 


The IIC_IS Register records interrupt conditions from the memory interface controller (MIC), Element Inter- 
connect Bus (EIB) unit, I/O address translation (Xlate), performance monitoring (PM), and token manager 
(TKM). When an interrupt occurs, the corresponding bit is set to ‘1’. If the Interrupt Status Register is nonzero, 
the IIC creates a class 1 interrupt that goes to either the EIB, IPPO, or IPP1 depending on how the IIC_IR is 
configured. After resetting the interrupt condition in the source unit, software resets the interrupt by writing ‘1’ 
to the corresponding bit position in the Interrupt Status Register. Writing ‘O’ to the corresponding bit has no 
effect on that bit. Writing this register must occur to confirm handling of interrupts in the IIC_IS Register. 

























































































Register Short Name IIC_IS Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘508448’ Memory Map Area Internal Interrupt Controller (IIC) 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit IIC 
Reserved 
7 > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
L 
aE 
Q — — 
Reserved di Saiz =e 
< 
Yvvy vy vy 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58) 59|60| 61/62/63 
Bits Field Name Description 
0:58 Reserved All bits read back zero. 
EIB Possible Livelock Detection Interrupt 
0 Inactive 
59 ELDI 1 Active 
Note: See EIB_Int[0] for additional information 
Memory Interface Controller (MIC) Auxiliary Trace Buffer Full Interrupt 
60 MATBFI 0 Inactive 
1 Active 
61 ATI 1/O Address Translation Interrupt Active 
62 PMI Performance Monitor Interrupt Active 
63 TMI Token Manager Interrupt Active 
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7. Memory Interface Controller (MIC) MMIO Registers 


This section describes the MIC memory-mapped I/O (MMIO) registers. Table 7-1 shows the MIC MMIO 
memory map and lists the MIC registers. The MIC unit shares a memory space with the token manager 
(TKM) unit. This shared space starts at x‘50A000’ and ends at x‘5OAFFF’. Offsets are from the start of the 
MIC register space. For the complete CBE MMIO memory map, see Section 1 Cell Broadband Engine 
Memory-Mapped I/O Registers on page 19. 


The following notes apply to the register bit definitions: 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Note: YRAC (Yellowstone Rambus ASIC Cell) is the old term for the external data representation (XDR) I/O 
Cell or XIO. The old term still exists in register names. 


Note: The MIC interfaces to the XDR I/O Cell, which orders its bits in big-endian notation. Fields in the MIC 
registers that access the XDR I/O Cell facilities (buses, registers or bit numbering) have the ordering of the 
bits described explicitly in those fields. The names of the fields that access these facilities are in uppercase. 
The bit ranges of these fields are represented using big-endian notation (for example, ALL_CAPSf[start- 
bit:endbit], where startbit is the most significant bit and endbit is the least significant bit). 


7.1 MIC MMIO Memory Map 


Table 7-1 provides the MIC MMIO memory map. Reserved registers return zero on read access. All the MIC 
registers have privileged mode access. 


Table 7-1. MIC MMIO Memory Map (Page 1 of 3) 





Hexadecimal 














Offset Register Name and (Short Name) Be e Additional Information 
(x‘50Annr’) 
MIC_CTL MMIO Registers 
x‘040’ MIC Control Configuration Register 2 (MIC_Ctl_Cnfg2) 64 | RW _ Section 7.2.1 on page 158 
x048 Reserved 
x050 MIC Auxiliary Trace Base Address Register 64 R/W | Section 7.2.2 on page 160 


(MIC_Aux_Trc_Base) 





MIC Auxiliary Trace Max Address Register 








x‘058 (MIC_Aux_Tre_Max_Adar) 64 | RW _ Section 7.2.3 on page 161 
man MIC Auxiliary Trace Current Address Regis- ; 

x‘060 ter(MIC_Aux_Trc_Cur_Addr) 64 | RW Section 7.2.4 on page 162 
Paa MIC Auxiliary Trace GRF Address F 

x‘068 (MIC_Aux_Tre_Grt_Addr) 64 RW | Section 7.2.5 on page 163 





x‘070 MIC Auxiliary Trace GRF Data (MIC_Aux_Trc_Grf_Data) 64 | RW _ Section 7.2.6 on page 164 














x‘078’ Reserved 
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Table 7-1. MIC MMIO Memory Map (Page 2 of 3) 
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Hexadecimal 




























































































Offset Register Name and (Short Name) Eis) nes Additional Information 
(x‘50Annr’) 
be eo in Sy istern [m= 0,1] 64 | R/W | Section 7.2.7 on page 165 
z Hs Reserved 
T o M A ai lige fa mere nie 64 | R/W | Section 7.2.8 on page 166 
fie oe ae a = Gn npjm=0,1] 64 | R/W | Section 7.2.9 on page 167 
e ee prepa ney 1] 64 | R/W | Section 7.2.10 on page 168 
sre ee nin=0,1] 64 | R/W | Section 7.2.11 on page 169 
eee ie oe ae Money ff 64 | RW Section 7.2.12 on page 170 
a Reserved 
XDR DRAM Controller (YC) Registers 
eae eee T erat 64 | RW _ Section 7.3.1 on page 171 
ae Wea Hs se Ora =0,1] 64 | RW _ Section 7.3.2 on page 173 
aor We ee fs Gain ister n [n = 0,1] 64 | RW | Section 7.3.3 on page 175 
ne i ap lig age fe ey [n= 0,1] 64 | RW | Section 7.3.4 on page 177 
ua Wicca Ae n[m=0,1] 64 | RW | Section 7.3.5 on page 178 
res eee ieee 64 | R/W Section 7.3.6 on page 180 
Dataflow (DF) Registers 
ei Mee ee ) [n=0,1] 128 R/W | Section 7.4.1 on page 181 
es he A T A e i Register n 64 | RW |Section 7.4.2 on page 184 
XDR DRAM Controller (YC) Registers 
oe Hise TA ie Hil 0, 7 64 RW | Section 7.5.1 on page 185 
A aba S E si ri i 64 | W Section 7.5.2 on page 187 
oe eee Lee A 1 64 | R/W Section 7.5.3 on page 189 
o ae ene a is ad ARSON 64 | R __ Section 7.5.4 on page 192 
i o ee ai npm=0;1] 64 | R |Section 7.5.5 on page 194 
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Hexadecimal 










































































Offset Register Name and (Short Name) cy Bie Additional Information 
(x‘50Annn’) 

x128 

x168 Reserved 

x‘130° MIC Periodic Timing Calibration Address Register n [n = : 

x170 0,1] (MIC_PTCal_Adr_n [n = 0,1]) 64 RW __Section 7.5.6 on page 196 

xX‘'138’ 

x178 Reserved 

x‘200' MIC Refresh and Scrub Register (MIC_Ref_Scb) 64 RW _ Section 7.5.7 on page 197 

x‘208’ MIC Execute Register (MIC_Exc) 64 | RW _ Section 7.5.8 on page 198 

x‘210’ MIC Maintenance Config Register (MIC_Mnt_Cfg) 64 | RW | Section 7.5.9 on page 200 
Dataflow (DF) Registers 

x218 MIC Dataflow Configuration Register (MIC_DF_Config) 64 R/W | Section 7.6.1 on page 201 

x‘220' 

x228 Reserved 
Fault Isolation (FIR) Registers 

x‘230’ MIC Fault Isolation and Checkstop Enable Registers 64 RW _ Section 7.7 on page 203 

Ban MIC ErrorMask/RecErrorEnable/Debug Control Register ; 

x‘238 (MIC_FIR_Debug) 64 R/W | Section 7.7.2 on page 205 
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7.2 MIC_CTL MMIO Registers 


7.2.1 MIC Control Configuration Register 2 (MIC_Ctl_Cnfg2) 




















































































































Register Short Name MIC_Ctl_Cnfg2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A040’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
E 
E 
o el 
S o 
Z z= 
x Fe o! o! 
e, oe 72255 
S@negtoeoas § x 
c © c U Cc I ao te 
wi | Ww E a ee 
e dd eggo 
BS RESPERPRS S 
qequsnaadiiu Reserved 
> 
Sn en 2 2 2 A a 
07;1/;2;);3)4/;5;)6]7)8/9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Enable auxiliary trace 
0 AuxTr_Enable 0 Auxiliary trace is disabled. 
1 Auxiliary trace is enabled. 
Auxiliary trace cannot be enabled in Slow Core Mode. 
Enable auxiliary trace GRF debug 
0 Auxiliary trace GRF debug is disabled. 
1 AuxTrc_GRF 1 Auxiliary trace GRF debug is enabled. 
Note: If this bit is enabled, the MIC_Aux_Trc_Grf_Data register needs to be read twice to get the 
correct data for the current GRF address. 
Enable Fast Path mode. Speculative read must be enabled if Fast Path is enabled 
ee (MIC_Ctl_Cnfg_n[1] = ‘0’). 
2 aih_Enable 0 Fast Path mode is disabled. 
1 Fast Path mode is enabled. 
Enable Write Masking 
3 WMask_Enable 0 Write Masking is disabled. 
1 Write Masking is enabled. 
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Bits Field Name Description 
Enable Single-Threaded mode 
In single-threaded mode, the MIC accepts and executes only one command at a time and the MIC 
4 Sinale Thread retries all other commands it receives until that command has executed. When single-threaded 
gle_ mode is disabled, the MIC can accept up to 64 writes and 64 reads before retrying commands on 
the bus. 
Note: The MIC single-threaded mode is not related to the multithreading features of the PPE. 
Disable High Priority Reads 
5 Disable_HiPri_R 0 High Priority Reads are enabled. 
1 High Priority Reads are disabled. 
Disable Power Savings Mode 
‘ 0 Power Savings Mode is enabled. 
6 Disable_Pwr_Sav | Power Savings Mode is disabled. 
Note: Power Savings Mode must be disabled for Display/Alter (Auxiliary Trace is disabled). 
Disable Auxiliary Trace Wrap 
x 0 Auxiliary Trace Wrap is enabled. 
1 Disable Aux Tre Wrap 1 Auxiliary Trace Wrap is disabled. 
Note: Auxiliary Trace Wrap must be enabled for Display/Alter. 
i Enable Auxiliary Trace Wrap Interrupt 
8 B ei 0 Auxiliary Trace Wrap Interrupt is disabled. 
1 Auxiliary Trace Wrap Interrupt is enabled. 
9:63 Reserved Bits are not implemented; all bits read back zero. 
Version 1.5 Memory Interface Controller (MIC) MMIO Registers 
April 2, 2007 Page 159 of 357 


Registers 


Cell Broadband Engine 


7.2.2 MIC Auxiliary Trace Base Address Register (MIC_Aux_Trc_Base) 


SONY 


SONY 


COMPUTER: 
SREMARMER © 











BE_MMIO_Base 


Register Short Name MIC_Aux_Trc_Base Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A050’ Memory Map Area MIC and TKM 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 

































































Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
Reserved AUX_BASE 
> 
M YY 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27)|28 29 30 31 
AUX_BASE Reserved 
: 4y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56/57 58 59 60 61 62 63 
Bits Field Name Description 
0:27 Reserved Bits are not implemented; all bits read back zero. 
28:56 AUX_BASE Base address of the auxiliary trace array 
57:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.3 MIC Auxiliary Trace Max Address Register (MIC_Aux_Trc_Max_Addr) 
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BE_MMIO_Base 


Register Short Name MIC_Aux_Trc_Max_Addr Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A058’ Memory Map Area MIC and TKM 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 










































































Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
Reserved AUX_MAX 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27/28 29 30 31 
AUX_MAX Reserved 
< 
4 4 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56|57 58 59 60 61 62 63 
Bits Field Name Description 
0:27 Reserved Bits are not implemented; all bits read back zero. 
Maximum address of the auxiliary trace array 
28:56 AUX MAX When the current address matches the maximum address, the command has been sent to the rest 
f -7 of the CTL subunit, the data has been sent to the DF subunit if it is a write, and the current address 
is reset to the base address. 
57:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.4 MIC Auxiliary Trace Current Address Register(MIC_Aux_Trc_Cur_Addr) 












































Register Short Name MIC_Aux_Tre_Cur_Addr Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A060’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 

g 

z 

8 

Reserved £  CUR_ADR 

M t4 y 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26|27|28 29 30 31 














CUR_ADR Reserved 


E: 









































32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56/57 58 59 60 61 62 63 
Bits Field Name Description 
0:26 Reserved Bits are not implemented; all bits read back zero. 
Read and write field 
(0) Write. The store is sent to memory if there is a cache line of data in the data array. See the 
27 Read_Write CUR_ADR field, MIC_Aux_Trc_Cur_Addr[28:56]. 
1 Read. The read is sent to memory when this register is written. This register increments 
after every access to memory. See the CUR_ADR field, MIC_Aux_Trc_Cur_Addr[28:56]. 
28:56 CUR_ADR Address of the next cache line. See the Read_Write field, MIC_Aux_Trc_Cur_Addr[27]. 
57:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.5 MIC Auxiliary Trace GRF Address (MIC_Aux_Trce_Grf_Addr) 










































































Register Short Name MIC_Aux_Trc_Grf_Addr Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A068’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
Reserved 
M 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Q 
a Reserved GRF_ADR Reserved 
vy 4 4 vv 4 
32/33 34 35 36 37 38 39 40 41 42|43 44 45 46 47/48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:31 Reserved Bits are not implemented; all bits read back zero. 
ECC write. 
(0) The 8 bytes of data in the MIC_Aux_Trc_Grf_Addr register are stored to the first 8 bytes of 
32 ECC this entry in the auxiliary trace data array. 
1 The first byte in the MIC_Aux_Trc_Grf_Addr register is stored to the ninth byte of this entry 


in the auxiliary trace data array. 





33:42 Reserved Bits are not implemented; all bits read back zero. 


Address of the next entry in the auxiliary trace data array. This register is only used for display/alter 
(auxiliary trace disabled). The register itself does not auto-increment, but the GRFWrtAdr (which is 
43:47 GRF_ADR set when this register is written) increments when data is stored in the data array. For the first cache 
line in the data array, the address should be set to ‘00000’. For the second cache line, it should be 
set to ‘10000’. 





48:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.6 MIC Auxiliary Trace GRF Data (MIC_Aux_Trc_Grf_Data) 
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BE_MMIO_Base 


Register Short Name MIC_Aux_Trc_Grf_Data Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A070’ Memory Map Area MIC and TKM 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 





























Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 

DWO 
M 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 











DW1 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name 


Description 





0:31 DWO 


Data to be stored into the auxiliary trace data array. 
If MIC_Aux_Trc_Grf_Addr[0], the ECC entry bit, is set, only bits [0:7] of this register are valid. 
Note: MIC_Ctl_Cnfg2[1] must be set to ‘1’ to read this register. 





32:63 DW1 











Data to be stored into the auxiliary trace data array. 
If MIC_Aux_Trc_Grf_Addr[0], the ECC entry bit, is set, only bits [0:7] of this register are valid. 
Note: MIC_Ctl_Cnfg2[1] must be set to ‘1’ to read this register. 
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7.2.7 MIC Control Configuration Register n [n = 0,1] (MIC_Ctl_Cnfg_n [n = 0,1]) 











Value at Initial POR 


Register Short Name MIC_Ctl_Cnfg_0 Privilege Type Privilege 1 
MIC_Ctl_Cnfg_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A080’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘50A1C0’ 


All bits set to zero Value During POR Set By 


Scan initialization during POR 





























Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 

> Ð 5 

© G m 

Areg 

e 2 al uw! 

fe) Qa w O 

a Oost = 

ot ap ee 

2 Qoe 

ees = Reserved 

> 

en a a y 

0;1;2);3/;4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 




















Reserved 


soo o o l O 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 














Bits Field Name Description 
Disable Power Savings Mode. Power Savings Mode must be disabled for Display/Alter (Auxiliary 
Disable P s Trace is disabled). 

9 Baier ower_sav |o Power savings mode is enabled. 
1 Power savings mode is disabled. 
Disable Speculative Reads 

1 Disable_Spec_Read 0 Speculative reads are enabled. 
1 Speculative reads are disabled. 
Enable Half (64-byte) Operations 

2 Enable_Half_Op 0 64-byte operations are disabled. 
1 64-byte operations are enabled. 





Reserve 16 queue entries for auxiliary trace 























3 AUX_TRACE_16BUF |0 8 queue entries for auxiliary trace. 
1 16 queue entries for auxiliary trace. 
4 Reserved Reserved. Software should ignore value read and write only zero. 
5:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.8 MIC Slow Mode Fast Timer Register n [n = 0,1] (MIC_Slow_Fast_Timer_n [n = 0,1]) 





Bit-fields in this register must be set to the recommended values in order for the Power Management modes 


on the MIC to work. 











Register Short Name MIC_Slow_Fast_Timer_O Privilege Type Privilege 1 
MIC_Slow_Fast_Timer_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A090’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘50A1D0° 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 







































































Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
9 
oO 
xe} 
O 
= 
Š 
Reserved D Slow_Mode_Timer_N20 Reserved 
> 
M %4 4 y voy 
[o 1 2 3 4 5 6 7 8/9/10 11 12 13 14 15 16 17/18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:8 Reserved Bits are not implemented. Bits read back the value of the Slow Mode Current Timer. 
Slow Mode. The recommended setting for this bit is ‘1’. 
9 Slow_Mode_0 0 Normal mode 
1 Slow mode (when NCIk < 2 x MiClk) 
Number of cycles between when commands can be selected for the slowest clock rate supported. 
The recommended setting for this field is x‘FF’. 

10:17 | Slow_Mode_Timer_N20 Note: The read and write masks for this register do not match. When this register is written, 
MIC_Slow_Fast_Timer[9:17] are written. When this register is read, MIC_Slow_Fast_Timer[0:8] of 
the read data are the Slow Mode Current Timer, MIC_Slow_Fast_Timer[9:17] are the Slow Mode 
N/20 Timer, and MIC_Slow_Fast_Timer[18:26] are the Slow Mode Next Timer. 

18:26 Reserved Bits are not implemented. Bits read back the value of the Slow Mode Next Timer. 

27:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.9 MIC Slow Mode Next Timer Register n [n = 0,1] (MIC_Slow_Next_Timer_n [n = 0,1]) 





Bit fields in this register must be set to the recommended values in order for the Power Management modes 
on the MIC to work. 




































































Register Short Name MIC_Slow_Next_Timer_0 Privilege Type Privilege 1 
MIC_Slow_Next_Timer_1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A098’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A1D8' 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
9 
o 
E 
a 
= * 
oO i) 
i : 
| € 
z £ 
Reserved D Slow_Mode_Timer 8 Reserved 
> 
M t4 y t4 y 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17/18/19 20 21 22 23 24 25 26/27/28 29 30 31 
Reserved 


S 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 














Bits Field Name Description 








Bits are not implemented. Bits [0:9] when read, return the Slow Mode Current Timer. Bits[9:17] 





O:a Reserved return the value of the Slow Mode N/20 Timer. 
Slow Mode. If the new clock frequency is NCIk < 2 x MiClk, set this bit to a ‘1’; otherwise, set this bit 
to ‘0’. 
18 Slow_Mode_1 jo Normal mode (‘00010100’). 
1 Slow mode (when NCIk < 2 x MiClk) 





Slow Mode Timer 

Number of cycles between the selection of commands for the next clock rate. This field should be 
set to 32 times the ratio of MiClk to NCIk; it should never be set to less than 32 when you are in slow 
mode. The highest ratio supported is 8:1. 

19:26 Slow_Mode_Timer Set to ‘00010100’ for Normal mode. 

Note: The read and write masks for this register do not match. When this register is written, 
bits[18:26] are written. When this register is read, bits[0:8] of the read data are the Slow Mode Cur- 
rent Timer, bits[9:17] are the Slow Mode N/20 Timer, and bits[18:26] are the Slow Mode Next Timer. 





Write Only bit. Commits the values in Slow_Mode_1 and Slow_Mode_Timer bit fields. 
27 Commit_Next_Timer_0 |0 Default 
1 Commits the values in Slow_Mode_1 and Slow_Mode_Timer fields. 





28:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.10 MIC Calibration Addresses n [n = 0,1] (MIC_Calibration_Addr_n [n = 0,1]) 


This register should only be written when scrubbing is disabled, because there is an asynchronous interface 
between where this register is located and the RLM that actually uses it. 





















































Register Short Name MIC_Calibration_Addr_O Privilege Type Privilege 1 
MIC_Calibration_Addr_1 

Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A0A0’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘S0A1E0’ 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 

xo} 

Cc 

m 
ke) ke 
y o 
> K 
2 2 
8 Calib_Addr_Start 5 
y I”? 
0/1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 

Calib_Addr_End Reserved 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56/57 58 59 60 61 62 63 




















Bits Field Name Description 
Calibration addresses valid. 
0 Calib_Valid 0 Calibration range in this register is not enabled. 
1 Calibration range is valid. 





Start address of range in memory that should not be scrubbed because it holds patterns for XIO cell 
1:28 Calib_Addr_Start periodic recalibration. This is the cache line address on this memory channel. See the programming 
note that follows this table. 


Next address in memory that can be scrubbed. This is the end address of the memory range that 
should not be scrubbed plus 1. This field should be written only before scrubbing starts. By default, 
all bits are set to zero. 


29:56 Calib_Addr_End This is the cache line address on this memory channel. See the programming note that follows this 
table. 

Note: MIC_Calibration_Addr[54:56] need to be equal to MIC_Calibration_Addr[26:28] in the 
Calib_Addr_Start field. 





57:63 Reserved Bits are not implemented; all bits read back zero. 

















Programming Note: Because MIC_Calibration_Addr[1:28] and MIC_Calibration_Addr[30:56] indicate the 
cache line address on this memory channel, the seven least significant bits are dropped off if a single memory 
channel is configured and the eight least significant bits are dropped off when two memory channels are 
present. When two memory channels are present, channel 0 has an implied ‘0’ appended to the right of the 
LSB of this value and channel 1 has an implied ‘1’ appended to the LSB of this value to form the effective 
cache-line offsets into the MIC. 
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7.2.11 MIC Token Manager Threshold Levels n [n = 0,1] (MIC_TM_Threshold_n [n = 0,1]) 











Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Register Short Name MIC_TM_Threshold_0 Privilege Type Privilege 1 
MIC_TM_Threshold_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A0A8’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘S0A1E8’ 


Scan initialization during POR 





























Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
2 
g 
E 
> 
fë 
ge] 
za 
3 3 
Read_Thresh_Lev1 Read_Thresh_Lev2 Read_Thresh_Lev3 Write_Thresh_Lev1 Write_Thresh_Lev2 Write_Thresh_Lev3 ¢ € 
y vy Vy vy t y v y vy? 
O 1 2 3 45 6 7 8 9/10 11 12 13 14/15 16 17 18 19/20 21 22 23 24|25 26 27 28 29/30/31 





























Reserved 


e—a 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 












































Bits Field Name Description 
Read threshold level 1 
0:4 Read_Thresh_Lev1 Five bits correspond to the queue entry level. There are 32 queues per XIO Cell. The highest level 
of the queues is sent to the token manager. 
5:9 Read_Thresh_Lev2 Re agd threshold level 2 
Five bits correspond to the queue entry level. 
10:14 Read_Thresh_Lev3 a ad nresnoig lever? 
Five bits correspond to the queue entry level. 
15:19 | Write_thresh_tevi | Wiite threshold level 1 
Five bits correspond to the queue entry level. 
20:24 | Write_Thresh_Lev2 |W" threshold level 2 
Five bits correspond to the queue entry level. 
25:29 | Write_Thresh_Leva |Ù" threshold level 3 
Five bits correspond to the queue entry level. 
Reset Token Manager Counters 
ResetTM t 
s0 esstTMCounters A write of ‘1’ resets the counters managing the token manager. A Read always returns 0. 
31:63 Reserved Bits are not implemented; all bits read back zero. 
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7.2.12 MIC Queue Burst Sizes Register n [n = 0,1] (MIC_Que_BurstSize_n [n = 0,1]) 


This register is used to select arbitration between reads and writes and must be set up during MIC Configura- 











tion. 

Register Short Name MIC_Que_BurstSize_0 Privilege Type Privilege 1 
MIC_Que_BurstSize_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A0B0’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘S0A1F0’ 





Value at Initial POR 


All bits set to zero 


Value During POR Set By Scan initialization during POR 





Specification Type 








Implementation-specific register Unit MIC (MIC_CTL) 














ReadQ_BurstSize 


WriteQ_BurstSize 


Reserved 


GS 











5 6 7 8 9 


10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 








Reserved 





4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name 


Description 





0:4 ReadQ_BurstSize 


5:9 WriteQ_BurstSize 


Read queue burst size. Used in read versus write arbitration. 


Write queue burst size. Used in read versus write arbitration. 


When the number of reads queued inside the MIC is greater than ReadQ_BurstSize, the CTL 
design macro issues more reads in a row before switching to writes. 


If both ReadQ_BurstSize and WriteQ_BurstSize thresholds are exceeded, or neither has been 
exceeded, CTL issues an equal number of reads and writes in a row. 


The recommended value for this field is 4 (‘00100’). 


When the number of writes queued inside the MIC is greater than WriteQ_BurstSize, the CTL 
design macro issues more writes in a row before switching to reads. 

If both ReadQ_BurstSize and WriteQ_BurstSize thresholds are exceeded, or neither has been 
exceeded, CTL issues an equal number of reads and writes in a row. 

The recommended value for this field is 12 (‘01100’). 





10:63 Reserved 








Bits are not implemented; all bits read back zero. 
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7.3 XDR DRAM Controller (YC) Registers 


All XDR DRAM controller (YC) registers are in the MiClk domain (typically 1.6 GHz). All YC register read data 
is left-justified on the EIB. 


Software must make sure that at least five MiClks have transpired before subsequent writes can be made to 
these control registers. If the clock frequencies cannot be determined, software can write and then read the 
register to ensure that the write has completed. This requirement does not apply to the Yreg_YDRAM_Dta 
and the Yreg_YRAC_Dta registers. 


Configuration registers should be written first, followed by those that are used to configure the memory 
channel. 
7.3.1 MIC Device Configuration Register n [n = 0,1] (MIC_Dev_Cfg_n [n = 0,1]) 


This register must be set during configuration of the MIC. These values should not be changed by hardware 
or software after configuration. Setting binary combinations not specified in the register description result in 
undefined behavior. 


This register contains values pertaining to the XDR DRAM chip used. These values control the real-to-phys- 
ical address mapping. 


Both MIC_Dev_Cfg registers (one for each half) must be set to the same value. 




































































Register Short Name MIC_Dev_Cfg_0 Privilege Type Privilege 1 
MIC_Dev_Cfg_1 

Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A0CO0’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A 180’ 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 

£ 

Cc 

oO 

a 

Z £ 

= =, 

£ 3 

3 PDWidth Dev_PS a SC _SR1_Map SC_SRO_Map Reserved 
vv yy 4y yy v4 i 
O 1/2 3 4 5 6 7/8 9 10 11|12|13 14 15 16 17/18 19 20 21 22|23 24 25 26 27 28 29 30 31 

Reserved 


< 





4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 











Bits Field Name Description 








Number of internal banks. 
00 4 banks 

01 8 banks 

10 16 banks 


0:1 Num_Int_Banks 

















Version 1.5 Memory Interface Controller (MIC) MMIO Registers 
April 2, 2007 Page 171 of 357 


Registers 


Cell Broadband Engine 


SONY 


COMPUTER: 
SREMARMER © 


SONY 





Bits 


Field Name 


Description 








2:7 


PDWidth 


Programmed device width. 

000001 by 1 (x1) 

000010 by 2 (x2) 

000100 by 4 (x4) 

001000 by 8 (x8) 

010000 by 16 (x16) 

100000 by 32 (x32) 

This value is post-dynamic width adjustment (if used). 





Dev_PS 


Device page size. 
0001 1KB 
0010 2KB 
0100 4KB 
1000 8KB 





12 


BLength 


Burst length (BL). 

0 BL of 16 (tCC = 5 ns) 

1 BL of 32 (tCC = 10 ns) 

where tCC is the column-to-column time 





13:17 


SC_SR1_Map 


Subcolumn (SC) to subrow[1] (SR[1]) (MSB) mapping. 
00000 Subpage activation is not used 

If subpage activation is used, choose one of the following: 
10000 SC[4] is mapped to SR[1] 

01000 SC[3] is mapped to SR[1] 

00100 SC[2] is mapped to SR[1] 

00010 SC[1] is mapped to SR[1] 

00001 SC[0] is mapped to SR[1] 





18:22 


SC_SRO_Map 


Subcolumn (SC) to subrow([0] (SR[0]) (LSB) mapping. 
00000 Subpage activation is not used 

If subpage activation is used, choose one of the following: 
10000 SC/[4] is mapped to SR[0] 

01000 SC[3] is mapped to SR[0] 

00100 SC[2] is mapped to SR[0] 

00010 SC[1] is mapped to SR[0] 

00001 SC[0] is mapped to SR[0] 








23:63 





Reserved 





Bits are not implemented; all bits read back zero. 
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7.3.2 MIC Memory Configuration Register n [n = 0,1] (MIC_Mem_Cfg_n [n = 0,1]) 


This register contains some miscellaneous memory configuration values. After startup, these values should 
not be changed by hardware or software. 


The MIC_Mem_Cfg_0 and MIC_Mem_Cfg_1 registers must both be set to the same value. 











Register Short Name MIC_Mem_Cfg_0 Privilege Type Privilege 1 
MIC_Mem_Cfg_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A0C8’ Memory Map Area MIC and TKM 

BE_MMIO_Base x'50A188’ 





Value at Initial POR 


All bits set to zero Value During POR Set By = Scan initialization during POR 
































Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
c 
Oo 
(0) 
ai 
<x 
2 o 
O S 
E 
MemSize EA Reserved 
> 
y t4 4y 
012 3 4 5 6 7 8 9/10|11|12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 

















< 


Reserved 





4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 











Bits Field Name 


Description 





10 ER_Dis 








0:9 MemSize 


Memory Size Enable vector. 


If only one memory channel is populated, make this vector match the memory capacity on the pop- 
ulated memory channel. If both memory channels are populated, make this vector match the mem- 
ory capacity on a populated memory channel. The memory capacity of both memory channels must 
be the same. 


x‘000’ 32 MB/memory channel (both memory channels must be populated in this case) 
x‘001’ 64 MB/memory channel 

x‘003’ 128 MB/memory channel 

x‘007’ 256 MB/memory channel 

x‘OOF’ 512 MB/memory channel 

x‘01F’ 1 GB/memory channel 

x‘03F’ 2 GB/memory channel 

x‘07F’ 4 GB/memory channel 

x‘OFF’ 8 GB/memory channel 

x‘1FF’ 16 GB/memory channel 

x‘3FF’ 32 GB/memory channel 

Note: This is on a per memory channel basis. 


Early Read Disable 

Set this bit under the following conditions: 
e You are using XDR DRAMs that support Early Read, but you do not want to use it. 
e You are using XDR DRAMs that do not support Early Read. 

When Early Read is enabled, tPP-D = 1 (fixed). 
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Bits Field Name Description 








Disable Address Parity Generation 


11 Disable_APGen Controls the generation of three odd parity bits over the address of each command. When ECC is 
used, Dataflow includes these three address parity bits in its ECC generation and checking. 




















12:63 Reserved Bits are not implemented; all bits read back zero. 
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7.3.3 MIC tRCD and Precharge Register n [n = 0,1] (MIC_Trcd_Pchg_n [n = 0,1]) 


After startup configuration, these values should not be changed by hardware or software. The 
MIC_Trcd_Pchg register contains values that determine when the first COL command for an access is 
issued, as well as when the Precharge command is issued. Timings for calibration commands are also 
included in this register. Both MIC_Trcd_Pchg registers (MIC_Trcd_Pchg_0 and MIC_Trcd_Pchg_1) must be 
set to the same value. 




































































Register Short Name MIC_Tred_Pchg_0 Privilege Type Privilege 1 
MIC_Trcd_Pchg_1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A0D0’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A190° 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
tRCD_R tRCD_W RPrecharge WPrecharge tPMO tPM_CALZ tPM_CALC 
> 
M 4 y 4 y 4 y% 4 y 4 y 4 y% 
0 1 2 3/4 5 6 7/8 9 10 11 12/13 14 15 16 17/18 19 20 21 22 23/24 25 26 27 28)29 30 31 
9 
< 
(®) 
m 
a tCALZE tCALCE Reserved 
WV vy Vy y 





32 33|34 35 36 37 38/39 40 41 42 43|44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 





























Bits Field Name Description 
tRCD-R value. 
0010 If the tRCD-R value is 3 in the XDR DRAM datasheet, the controller uses a tRCD-R value 
of 3. 
0100 If the tRCD-R value is 4 or 5 in the XDR DRAM datasheet, the controller uses a tRCD-R 
0:3 tRCD_R value of 5. 
0110 If the tRCD-R value is 6 or 7 in the XDR DRAM datasheet, the controller uses a tRCD-R 
value of 7. 
1000 If the tRCD-R value is 8 or 9 in the XDR DRAM datasheet, the controller uses a tRCD-R 
value of 9. 
tRCD-W value. 


0010 If the tRCD-W value is less than or equal to 3 in the XDR DRAM datasheet, the controller 
uses a tRCD-W value of 3. 


0100 If the tRCD-W value is 4 or 5 in the XDR DRAM datasheet, the controller uses a tRCD-W 


4:7 tRCD_W value of 5. 
0110 If the tRCD-W value is 6 or 7 in the XDR DRAM datasheet, the controller uses a tRCD-W 

value of 7. 
1000 If the tRCD-W value is 8 or 9 in the XDR DRAM datasheet, the controller uses a tRCD-W 

value of 9. 





Precharge for a read. This value is the greater of the following values: 
e tRAS - 1 
e tRCD-R+2+tRDP - 1 if BL = 16; tRCD-R + tRDP - 1 if BL = 32 
The minimum value is ‘00101’ (5). 


8:12 RPrecharge 
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Bits Field Name Description 
Precharge for a write. This value is the greater of the following values: 
e tRAS-1 

13:17 WPrecharge e tRCD-W + 2 + tWRP - 1 if BL = 16; tRCD-W + tWPP - 1 if BL = 32 
The minimum value is ‘00101’ (5). 

18:23 tPMO tPMO value. Set to tPMO - 3. Then minimum value is ‘000101’ (5). 
tPM-CALZ value. 

ee tPM_CALZ Set to tPM-CALZ - 3. The minimum value is ‘00101’ (5). 
tPM-CALC value. 

ae IEM-CALG Set to tPM-CALC - 3. The minimum value is ‘00101’ (5). 
tCALZE value. 

acs ne Set to tCALZE - 1. The minimum value is ‘00111’ (7). 
tCALCE value. 

sone IGALGE Set to tCALCE - 1. The minimum value is ‘00111’ (7). 

44:63 Reserved Bits are not implemented; all bits read back zero. 
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7.3.4 MIC Command Duration Register n [n = 0,1] (MIC_Cmd_Dur_n [n = 0,1]) 


After startup, these values should not be changed by hardware or software. This register contains values that 
determine the duration of various commands. Both MIC_Cmd_Dur registers must be set to the same value. 



































Register Short Name MIC_Cmd_Dur_0 Privilege Type Privilege 1 
MIC_Cmd_Dur_1 

Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A0D8’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A198" 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 

ERCTR ERCTW Reserved 


OU y  e e 


012 3 4 5/6 7 8 9 10 11/12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 






























































Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Effective row cycle time for a read. 
This value is the greatest of the following values: 
e tRC-1 
0:9 Enel e tRAS +tRP - 1 
e tRCD-R+2+tRDP +tRP - 1 for BL = 16; tRCD-R + tRDP + tRP - 1 for BL = 32 
The minimum value is ‘000111’ (7). The maximum value is ‘111100’ (60). 
Effective row cycle time for a write. 
This value is the greatest of the following values: 
e tRC-1 
$1 ERGTW e tRAS +tRP -1 
e tRCD-W + 2+tWRP + tRP - 1 for BL = 16; tRCD-W + tWRP + tRP - 1 for BL = 32 
The minimum value is ‘000111 (7). 
12:20 Reserved Reserved. Software should ignore value read and write only zeros. 
21:63 Reserved Bits are not implemented; all bits read back zero. 
Version 1.5 Memory Interface Controller (MIC) MMIO Registers 


April 2, 2007 Page 177 of 357 


SONY 


Registers “> SONY 


SOMAS o 


Cell Broadband Engine 


7.3.5 MIC Command Spacing Register n [n = 0,1] (MIC_Cmd_Spc_n [n = 0,1]) 


This register contains values that control the spacing of reads and writes relative to one another. Both 
MIC_Cmd_Spc registers (MIC_Cmd_Spc_0 and MIC_Cmd_Spc_1) must be set to the same value. After 
startup, these values should not be changed by hardware or software. 


Write-to-write, read-to-read, refresh-to-write, refresh-to-read, write-to-refresh, and read-to-refresh are deter- 
mined by the tRR parameter of 4. Precharge-to-precharge is determined by the tPP parameter of 4 (1 for 
different bank sets when early read is enabled). 
































Register Short Name MIC_Cmd_Spc_0 Privilege Type Privilege 1 
MIC_Cmd_Spc_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A0E0’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘50A1A0° 

Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 

Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
= 
A 
x= 
O 
2 
E 

RTW_Comintvl WTR_Comintvi SB WTR_Comintvi_OB WTR_Same_Ctr LCASCR LCASCW £ 
































O 1 2 3 4/5 6 7 8 910 11 12 13 14/15 16 17 18 19 20 21/22 23 24 25|26 27 28 29/30 31 
€ 
A oc 
$ í 
È Q 
z oc 
£ = Reserved 
“Viv u 











32 33 34/35/36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 











Bits Field Name Description 








Read-to-Write Command Interval 
When tCC = 2, tRCD-R + 2 + taRW - tRCD-W - 2 
0:4 RTW_ComintvI Else if tCC = 4, tRCD-R + tARW - tRCD-W - 2 


Resulting values of 0 or 1 are treated as 2 because tRR, min is 4. If the resulting value is negative, 
enter zero (‘00000’). This value controls the minimum spacing between reads and writes being 
started. tARW includes the round-trip propagation delay. 





Write-to-Read Command Interval, Same Bank Set/ER Disabled 
When tCC = 2, tRCD-W + 2 + tAWR - tRCD-R - 2; 
5:9 WTR_Comintvl_SB Else if tCC = 4, tRCD-W + tAWR - tRCD-R - 2 


Resulting values of 0 or 1 are treated as 2 because tRR, min is 4. If the resulting value is negative, 
enter zero (‘00000’). This value controls the minimum spacing between writes and reads for the 
same bank sets. If Early Read is disabled, only this Write-to-Read value is used. 
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Bits Field Name Description 
Write-to-Read Command Interval, Opposite Bank Set 
When tCC = 2, tRCD-W + 2 + tAWR-D - tRCD-R - 2; 
10:14 WTR_Comintvl_OB Else if tCC = 4, tRCD-W + tAWR-D - tRCD-R - 2 
Resulting values of 0 or 1 are treated as 2 because tRR, min is 4. If the resulting value is negative, 
enter zero (‘00000’). This value controls the minimum spacing between writes and reads for oppo- 
site bank sets. This value is only used when Early Read is enabled. 
Write-to-Read Same Counter 
When tCC = 2, 
(tAWR x 4) - 18 
Else if tCC = 4, 
15:21 WTR_Same_Ctr (tAWR x 4) - 26 
If this value is negative, enter zero (‘0000000’). If Early Read is disabled, this value is a Don’t Care. 
This assumes also that tRCD-W = tRCD-R. If this is not true, formula should be the results of 
MIC_Cmd_Spc_n [5:9] of this register x 4 - 18. For early reads, this is supposed to be true, there- 
fore it should not be a concern. 
Last CAS Counter for Read 
, tRCD-R + 1 for Burst Length = 16 
anes Pees tRCD-R - 1 for Burst Length = 32 
Controls when to switch to start a command at any time. Otherwise, avoids column commands. 
Last CAS Counter for Write 
p tRCD-W + 1 for Burst Length = 16 
anes LCASOW tRCD-W - 1 for Burst Length = 32 
Controls when to switch to start a command at any time. Otherwise, avoids column commands. 
Precharge for a Write (WPrecharge) - Precharge for a Read (RPrecharge) - 2 
If negative, enter zero (‘00000’) 
30:34 RowPrechDiff (See field descriptions in tRCD and Precharge Register description above.) 
Controls the Write Precharge Scoreboard location, so that the read precharges after a Write-to- 
Read turnaround in early read-after-write (ERAW) hardware are issued to meet tPP-D. tPP-D,min of 
1 is supported. 
tAWR-D Not Restricted 
Set this bit if the XDR DRAM has no restriction on the value of tAWR-D between the values of 
tAWR-D,min and tAWR, min - 1. If the XDR DRAM has a restriction on the value of tAWR-D, it is typ- 
ically articulated in a footnote in the timing parameters section of the XDR DRAM spec. If there is a 
tAWR-D restriction, then every other value after tAWR-D,min until tAWR,min is not allowed by the 
hardware. 
For example, 
35 tWR_D_NR if tAWR-D,min = 2 and tAWR, min = 9, 
then 2 is allowed for tAWR-D, 
3 is not, 
4is, 
5 is not, 
6 is, 
7 is not, 
and 8 is. 
36:37 Reserved Reserved. Software should ignore value read and write only zeros. 
38:63 Reserved Bits are not implemented; all bits read back zero. 
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This register contains values that control the dataflow interface. After startup, these values should not be 


changed by hardware or software. 


Both MIC_Df_Ctl registers, one for each half, must be set to the same value. 











Register Short Name MIC_DF_Ctl_O Privilege Type Privilege 1 
MIC_DF_Ctl_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A0E8’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘50A1A8 





Value at Initial POR All bits set to zero Value During POR Set By 


Scan initialization during POR 





















































Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
LDLValue ELDLValue RCDLValue MvWrDelay MvRdDelay Reserved 
> 
M vy vy vy vy vy 
0 12 3 4/5 6 7 8 9/10 11 12 13 14/15 16 17 18 19 20/21 22 23 24 25 26/27 28 29 30 31 
Reserved 





4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 



































Bits Field Name Description 
0:4 LDLValue Launch Delay Line Value. Set to tRCD-W + tQTD - 5. 
5:9 ELDLValue Expects Launch Delay Line Value. Set to tRCD-R + (tQRD - tERD) - 5. 
10:14 RCDLValue Read Complete Delay Line Value. Set to tQRD - 2. 
Move Write Delay 
Delay before moving data out of the SRAM to the GRF. 
15:20 MvWrDelay Set to [(tRCD-Ww + tQTD - 3) x 4] -5 
If negative, increase tRCD-W. 
This value has a different programming value and takes on a different meaning for Slow Core 
Mode. 
Delay before moving expected read data out of the SRAM to the GRF. 
. Set to [(tRCD-R + tQRD - tERD - 3) x 4] -5 
eine RED elay If negative, increase tRCD-R, following any aforementioned rules. 
This value has a different programming value for Slow Core Mode. 
27:63 Reserved Bits are not implemented; all bits read back zero. 
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7.4 Dataflow Registers 





7.4.1 MIC Dataflow XIO PTCal Register n [n = 0,1] (MIC_XIO_PTCal_Data_n [n = 0,1]) 


These registers contains the XIO periodic timing calibration (PTCal) data and setup information. These regis- 
ters are actually 128 bits wide, and are loaded by control bits [16:17] of the Dataflow Configuration Register. 
An entire cache line including ECC is 144 bytes. These 144 bytes are sent in groups of 9 in 16 MiClk periods. 
The 9 bytes in each group can be preset to receive the periodic timing calibration data (PTCal data) in 
register group A, B, or C. 


During sixteen MiClk periods, data is taken from one of the three PTCal data slots. For periods 0 - 3, slot 0 is 
used; for periods 4 - 7, slot 1 is used; for periods 8 - 11, slot 2 is used; and for periods 12 - 15, slot 3 is used. 


The net effect is that all DQ blocks receive the same pattern. Also, the pattern for each DQ pin on each block 
receives 4 bytes of data. For instance if a given pin was to receive data from group B, the output pattern 
would look like BO-B1-B2-B3: one byte for each of the four clock cycles. 


The TDATA bus from the MIC to XIO is ordered in big-endian notation: 71 to 0. The MIC fills the data in 
little-endian notation. Therefore, bit [0] (the MSB) of PTCal Data fields are actually sent last. For example, if 
slot B was set with the value BO-B1-B2-B3, the data sent over the pin would look like OD-8D-4D-CD 
amounting to 32 bit times. 


The following table shows the XIO DQ pin on which the selected byte is transmitted. 





Selected Byte (A, B or C) 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 








Output on DQ Pin 7 | 6 | 5 | 4 | 3 | 2 | 4 | o | 8 








Register Short Name MIC_XIO_PTCal_Data_0 Privilege Type Privilege 1 
MIC_XIO_PTCal_Data_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A0FO0’ Memory Map Area MIC and TKM 

BE_MMIO_Base x‘50A1B0’ 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 





Specification Type 








Implementation-specific register 





Unit 





MIC (YM_DF macro) 








First Half (bits [0:63]) 


PTCal_Data_AO 


PTCal_Data_A1 


PTCal_Data_A2 


PTCal_Data_A3 





M y 


M y 


` 4 


` 4 





0 1 2 3 4 5 6 


N 








8 9 10 11 12 13 14 15 





16 17 18 19 20 21 22 23 





24 25 26 27 28 29 30 31 








PTCal_Data_BO 


PTCal_Data_B1 


PTCal_Data_B2 


PTCal_Data_B3 





M 4 


y 4 


y 4 


y 4 





32 33 34 35 36 37 38 39 








40 41 42 43 44 45 46 47 





48 49 50 51 52 53 54 55 





56 57 58 59 60 61 62 63 
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Bits Field Name Description 
0:7 PTCal_Data_AO XIO PTCal data for slot AO 

8:15 PTCal_Data_A1 XIO PTCal data for slot A1 

16:23 PTCal_Data_A2 XIO PTCal data for slot A2 

24:31 PTCal_Data_A3 XIO PTCal data for slot A3 

32:39 PTCal_Data_BO XIO PTCal data for slot BO 

40:47 PTCal_Data_B1 XIO PTCal data for slot B1 

48:55 PTCal_Data_B2 XIO PTCal data for slot B2 

56:63 PTCal_Data_B3 XIO PTCal data for slot B3 

















Second Half (bits [64:127]) 


PTCal_Data_CO 


PTCal_Data_C1 


PTCal_Data_C2 


PTCal_Data_C3 




























































































v vv vy vv 4 
O 1 2 3 4 5 6 7/8 9 10 11 12 13 14 15|16 17 18 19 20 21 22 23|24 25 26 27 28 29 30 31 
Sel_ByteO Sel_Byte1 Sel_Byte2 Sel_Byte3 Sel_Byte4 Sel_Byte5 Sel_Byte6 Sel_Byte7 Sel_Byte8 Reserved 
v 4$ x vv 4 x 4 yx 4$ x vy vv vy $% Vv 4 
32 33 34|35 36 37/38 39 40/41 42 43|44 45 46|47 48 49/50 51 52|53 54 55|56 57 58/59 60 61 62 63 
Bits Field Name Description 
0:7 PTCal_Data_CO XIO PTCal data for slot CO 
8:15 PTCal_Data_C1 XIO PTCal data for slot C1 
16:23 PTCal_Data_C2 XIO PTCal data for slot C2 
24:31 PTCal_Data_C3 XIO PTCal data for slot C3 
Selection for Byte 0 of PTCal data 
100 Slot A data 
92:34 Sel_Byte0 010 Slot B data 
001 Slot C data 
Selection for Byte 1 of PTCal data 
100 Slot A data 
eet Sel_Byte1 010 Slot B data 
001 Slot C data 
Selection for Byte 2 of PTCal data 
100 Slot A data 
99:40 Sel_Byte2 010 Slot B data 
001 Slot C data 
Selection for Byte 3 of PTCal data 
100 Slot A data 
4143 Sel_Byte3 010 Slot B data 
001 Slot C data 
Selection for Byte 4 of PTCal data 
100 Slot A data 
44:46 Sel_Byte4 010 Slot B data 
001 Slot C data 
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Bits 


Field Name 


Description 








47:49 


Sel_Byte5 


Selection for Byte 5 of PTCal data 
100 Slot A data 
010 Slot B data 
001 Slot C data 





50:52 


Sel_Byte6 


Selection for Byte 6 of PTCal data 
100 Slot A data 
010 Slot B data 
001 Slot C data 





53:55 


Sel_Byte7 


Selection for Byte 7 of PTCal data 
100 Slot A data 
010 Slot B data 
001 Slot C data 





56:58 


Sel_Byte8 


Selection for Byte 8 of PTCal data 
100 Slot A data 
010 Slot B data 
001 Slot C data 





59:63 








Reserved 





Bits not implemented; all bits read back zero. 








TDATAI[71:0] is defined in the XDR I/O Cell specification. 
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7.4.2 MIC Dataflow Error Correction Code Address Register n [n = 0,1] (MIC_Ecc_Addr_n [n = 0,1]) 


This register holds the memory address and syndrome for error correction code (ECC) errors. 










































































Register Short Name MIC_Ecc_Addr_0 Privilege Type Privilege 1 
MIC_Ecc_Addr_1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A0F8’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A1B8" 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_DF macro) 
MemAdrECC 
> 
M 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
S z 
m (Aa 
= 7p) 
gz O 
E x 
2 Syndrome ParErr1 Rsvd_l ParErr2 Rsvd | & Reserved 
< 
vy vv YY vv vy vv y 4 
32 33 34/35 36 37 38 39 40 41 42|43 44 45 46 47|48 49 50|51 52 53 54 55|56 57 58|59|60 61 62 63 
Bits Field Name Description 
0:34 MemAdrECC Memory address of ECC error 
35:42 Syndrome Syndrome for ECC error 
43:47 ParErr1 Parity Error Address 1 
; Reserved. Latch bits are implemented; value read is the value written. Bits are reset to zero when 
48:50 Rsvd_l i 
an error is captured. 
51:55 ParErr2 Parity Error Address 2 
: Reserved. Latch bits are implemented; value read is the value written. Bits are reset to zero when 
56:58 Rsvd_| ; 
an error is captured. 
Data to SRAM 
When this bit is set to a ‘1’, the MIC stores characterization data into a functional SRAM for debug. 
59 DataToSRAM This is only used when MBL_Cil[0] is set to a ‘1’. This bit causes data used in memory initialization 
to be stored in the MBL SRAM and await display alter to take it out. The entire MBL SRAM must be 
read out if you are debugging memory characterization. 
60:63 Reserved Bits are not implemented; all bits read back zero. 
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7.5 XDR DRAM Controller (YC) Registers 


7.5.1 YRAC Data Register n [n = 0,1] (Yreg_YRAC_Dta_n [n = 0,1]) 


This register is used during the configuration of the memory channel by providing access to the XIO cell regis- 
ters. 













































































Register Short Name Yreg_YRAC_Dta_0 Privilege Type Privilege 1 
Yreg_YRAC_Dta_1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A100’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A140° 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
Reserved R XIO_Addr XxXIO_Data 
M $ 4 y viv 4 
O 1 2/34 5 6 7 8 9 10 11 12 13 14 15/16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
M 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:2 Reserved Bits are not implemented; all bits read back zero. 
Read 
0 Writing this register causes an XIO cell register write. 
3 R 1 This register is read in preparation for an XIO cell register write. 


A write to this register sets up the XIO cell address for a read. When this bit is set to ‘0’, a write to 
this register causes an XIO cell register write. 




















4:15 XIO_Addr XIO cell address [11:0] 

16:31 XIO_Data Value to be written or read [15:0]. The return value of these bits is determined by the underlying XIO 
cell register. 

32:63 Reserved Bits are not implemented; all bits read back zero. 





To write an XIO cell register, make sure that Yreg_YRAC_Dta_n[3] = 0. This initiates a write to the XIO cell 
register specified in Yreg_YRAC_Dta_n[4:15]. The data to be written is in Yreg_YRAC_Dta_n[16:31]. 


To read an XIO cell register, a two-step process must be followed. First, the XIO cell register must 

be specified, so a write to this Yreg_YRAC_Dta register is performed with Yreg_YRAC_Dta_n[3] set to ‘1’, 
Yreg_YRAC_Dta_n[4:15] specifying the XIO Cell register, and Yreg_YRAC_Dta_n[16:31] unused. A read to 
the Yreg_YRAC_Dta register is then performed, and the XIO cell register is accessed and the data returned 
in bits [16:31]. Reading the same XIO cell register can be performed over and over again. No other XIO cell or 
XDR DRAM accesses to the specified half are allowed during this operation. Each access to this register 
takes four PClks, which is nominally 10 ns. 


Register accesses must be blocked during a register-reset operation. See the MIC_Yreg_Stat Register for 
information about detecting resets. All accesses are lost during this time period and the first one is captured. 
An error is recorded if this condition arises. 
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Software is responsible for the timing parameter tRESET_CMD. Eight reads of the MIC_Yreg_Stat Register 
after bits [18:19] of said register = ‘00’ guarantees that at least four PClks have transpired. 


Hardware guarantees that XIO cell register accesses are blocked during calibration events, but these 
accesses complete even if there are back-to-back calibration events, as long as PAT_ENA gets back to zero. 


REG_ADDR[1 1:00], REG_RD_DATA[15:0], REG_WR_DATA[15:0] are defined in the XDR I/O cell data 
specification. 


Related Registers: 

e Yreg_YDRAM_Dta 
e MIC_Yreg_Stat 

e Yreg_Init_Ctl 
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7.5.2 YDRAM Data Register n [n = 0,1] (Yreg_YDRAM_Dta_n [n = 0,1]) 


This register provides hardware assists to create the appropriate XIO cell register accesses that performs a 
serial XDR DRAM write access. This register is used during the configuration of the memory channel by 
providing write access XDR DRAM devices. 


A write to this register with the SCMD[1:0] = SDW/SBW (Yreg_YDRAM_Dta[2] = 0) performs an XDR DRAM 
serial write transaction. 




































































Register Short Name Yreg_YDRAM_Dta_0 Privilege Type Privilege 1 
Yreg_YDRAM_Dta_1 
Access Type MMIO Write Only Width 64 bits 
Hex Offset From x‘50A108’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A148' 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
ne] ne} 
o o 
2 2 
o o 
N N 
 SCMD XIO_Adr 2 SID SADR VAL 
vvvvy t4 4y viv viv 4 
O 1/2 3/4 5 6 7/8 9/10 11 12 13 14 15/16 17 18 19 20 21 22 23/24 25 26 27 28 29 30 31 
Reserved 
M 4 








32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 

















Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
Serial Command SCMD[1:0] 
. 00 SDW-Write to a particular device 
an SOMD 01 SBW-Write to all the devices 


All other values are reserved. 





XIO address bits REG_ADDR[1 1:8] for a register access to the RQ_SERIAL_CTL register. 





























S XIO_Adr Use the value ‘0100’ for this field. This addresses the independent RQO block. 
8:9 Reserved Bits are not implemented; all bits read back zero. 
10:15 SID Serial Chip ID: SID[5:0] 
16:23 SADR Serial Address: SADR[7:0] 
24:31 VAL Value to be written. SWD[7:0]. The return value depends on the XDR DRAM register. 
32:63 Reserved Bits are not implemented; all bits read back zero. 





You cannot perform a serial read transaction using this register. A read returns the SCMD[1:0], SID[5:0], and 
SADR[7:0], and starts the serial transaction associated with these bits. This may not be desirable because 
XDR DRAM data field is unreliable. To perform a serial read, “Bit Bang” the RQ_SERIAL_CTL register of the 
XIO Cell with the correct sequence of commands and delay-to-account for the worst possible delay in the 
receive data for the number of XDR DRAM devices in the system. 
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Accessing this register initiates a series of 64-72 register reads and writes that send a scan command to the 
XDR DRAM chips. Only one XDR DRAM register access is allowed at any one time on any half. Also, no 
other XIO Cell or XDR DRAM register accesses are allowed during these operations. 


An XIO Cell register access takes four PClks. Therefore, an XDR DRAM write requires a minimum of 256 
PClks. A read to this register, while providing no useful information, requires a minimum of 288 PClks. 


Register accesses must also be blocked during a register reset operation. See the MIC_Yreg_Stat status 
register for detecting resets. All read and write accesses during this time are lost. An error is recorded if this 
condition arises. The capture register describes the first access that was lost on each half, a read or a write. 


The physical register implements only bits [2:23]. Only eight bits of data are written or read in each operation. 


Software is responsible for the timing parameter tRESET_CMD. Performing eight successive reads of the 
MIC_Yreg_Stat Register after MIC_Yreg_Stat[18:19] returns ‘00’ guarantees that a minimum of four PClks 
have elapsed. This register uses the XIO Cell register access, thus requiring the minimum number of PClks. 


Accesses to this register during normal operation can have an adverse effect on periodic calibration. Periodic 
calibrations wait until the XDR DRAM command has completed before starting. This effects tPEM and cali- 
brations should be disabled before doing an XDR DRAM write if this parameter is of importance. Whenever 
PAT_ENA is ignored, normal read, writes, and refreshes occur without interruption. 


Calibration events are held off during these operations. 
REG_ADDR[11:8] is defined in the XDR I/O Cell specification. 
SCMDf[1:0], SID[5:0], SADR[7:0] and SWD[7:0] are defined in the XDR XDRAM specification. 


Related Registers: 
e Yreg_YRAC_Dta 
e MIC_Yreg_Stat 
e Yreg_Init_Ctl 


Additional Information: For more information, see the XDR DRAM Datasheet. 


Memory Interface Controller (MIC) MMIO Registers Version 1.5 
Page 188 of 357 April 2, 2007 


SONY 


SONY “> Registers 


SAMMI © 


Cell Broadband Engine 


7.5.3 MIC Status Register n [n = 0,1] (MIC_Yreg_Stat_n [n = 0,1]) 


The register provides the status of XIO cell and XDR DRAM register accesses and other results. This register 
is used during the configuration of the memory channel by providing status during the initialization of the 
memory channel. 


From an MMIO standpoint, you can check on the status of a XIO Cell or XDR DRAM write. An XIO cell write 
takes approximately 4 x 400 MHz cycles. XDR DRAM writes take 2 x 32 x 400 MHz cycles. XDR DRAM 
reads take (2 x 32 + 8) x 400 MHz cycles. Because of the nature of the byte bus, only one read can happen at 
a time. Therefore, a value of MIC_Yreg_Stat[0:7] = x‘41’ indicates that a XIO Cell write is still occurring. A 
value of MIC_Yreg_Stat[0:7] = x‘21’ indicates that an XDR DRAM access is occurring. A value of 
MIC_Yreg_Stat[0:7] = x‘04’ indicates the read of the status register. 
























































































































































Register Short Name MIC_Yreg_Stat_0 Privilege Type Privilege 1 
MIC_Yreg_Stat_1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A110’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A150° 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register Unit MIC (YM_YC macro) 
i 
= = P 
£ £ S = © D > 
< = D 2 
Qa Q 2 cw - o 0 2 Q 
= a o coe ne] o g 
og 8 OGESYUag eH SS jtag 
xxoxxö nr TL Oo 8 sZt 3 20 o 
Stseteetrta sg &X a Paye -H ete ea G Reserved 
Sn A A 2 2 A, 7 A 2 2 2 s 4 
0/1/2/13/41/15]/6]/71/8/9/10/11/12 13 14/15|16|17/18|19/20/21|/22 23 24 25 26 27 28 29 30 31 
ErrCap 
4 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Read only. Writing XIO. MMIO reads cannot see this bit set. 
0 WrXIO 0 No access is occurring. 
1 An XIO register access is occurring. 
Read only. Writing XDR DRAM. 
0 No XDR DRAM register access is occurring. 
1 WrXDRDRAM 
k 1 XDR DRAM register write is occurring. 
MMIO reads cannot see this bit set. Approximately 64 XIO cell register writes. 
Read only. Writing status. 
2 WrStat 0 A write is not occurring to this register. 
1 Write of this register is occurring. 
Read only. Reading XIO. 
3 RdXIO 0 A read to = XIO register is nol oceuming: 
1 An XIO register read access is occurring. 
Note: MMIO reads cannot see this bit set. 
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Bits Field Name Description 
Read only. Reading XDR DRAM. 
0 A read of the XDR DRAM is not occurring. 
4 RdXDRDRAM 1 A read to the XDR DRAM register is occurring. 
Note: MMIO reads cannot see this bit set. XDR DRAM register reads using hardware acceleration 
are not supported. 
Read only. Reading status. 
0 This register is not being read. 
3 Rastat 1 This register is being read. 
Note: This bit indicates that this register is being read. 
Read only. Initialization sequencer busy. 
6 InitBusy 0 The initialization sequencer is idle. 
1 The initialization sequencer is busy. 
Read only. PAT_ENA output of the XIO cell. 
7 PAT_ENA 0 The XIO cell is not signaling a need for a calibration event. 
1 The XIO cell is signaling a need for calibration. 
Read only. Sequencers are idle. 
0 The main memory sequencers are not idle, they are busy. 
8 Seqldle , f 
1 The main memory sequencers are idle. 
There can be, however, commands in flight. 
XDR DRAM write or read in progress with an XDR DRAM/XIO cell access or XIO cell reset occur- 
RDRAMRecE ring, error status. 
3 id egrer jo No error has occurred during an XDR DRAM register access. 
1 An error has occurred during an XDR DRAM register access. 
XIO cell write or read is in progress with an XDR DRAM or XIO cell access or XIO cell reset. This 
XlOReaE causes an error. 
19 egen 0 No error has occurred during an XIO cell register access. 
1 An error has occurred during an XIO cell register access. 
The error occurred on a read versus write. 
11 ReadErr 0 If XIORegErr = 1 or XDRDRAMRegErr = 1, the access lost was a write. 
1 If XIORegErr = 1 or XDRDRAMRegErr = 1, the access lost was a read. 
Read only. PAT_TYPE[2:0]. 
000 Initial or Periodic XIO CCAL/ZCAL is requested or is in progress. 
001 Initial or Periodic XDR DRAM ZCAL is requested or is in progress. 
010 Initial or Periodic XDR DRAM CCAL is requested or is in progress. 
12:14 PatType 011 Periodic TCal is requested or is in progress. 
100 Reserved. 
101 Reserved. 
110 Initial XIO RX TCAL is requested or is in progress. 
111 Initial XIO TX TCAL is requested or is in progress. 
Read only. Frozen for initialization. 
15 Frzn 0 The MIC logic that drives the XIO cell interface is accepting commands. 
1 The MIC logic that drives the XIO cell interface is not accepting commands. 
Read only. Slow mode status. 
16 SlwMod 0 The MIC is not in slow mode. 
1 The MIC is in slow mode. 
Read only. Refresh pending. 
17 RefPend 0 There are no refreshes pending. 
1 There are refreshes pending. 
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Bits Field Name Description 
Read only. The TCU is ordering a register reset. 
18 tReg_reset 0 The MIC is not being told to do an XIO cell register reset. 
1 The TCU is telling the MIC to do an XIO cell register reset. 
Read only. Reg_Reset. Waiting 200 PClks before deasserting Reg_Reset. 
19 Reg_Reset 0 Reset complete. 
1 Internal reset is in progress. 
20 PTCal nead only. Periode timing eae l = a 
If this bit is set to ‘1’, this YC is responding to timing calibration. 
Read only. Queue empty. 
21 QueEmpty The store queues for this half are empty. No additional commands are coming. There is an asyn- 
chronous clock crossing to this register. 
22:31 Reserved Bits are not implemented; all bits read back zero. 
Error capture. If MIC_Yreg_Stat[9] of this register is set to ‘1’ , then Yreg_YDRAM_Dta[0:31] is cop- 
32:63 ErrCap ied to this location. If MIC_Yreg_Stat[10] is set to ‘1’, then Yreg_YRAC_Dta[0:31] is copied to this 
location. 











PAT_TYPE[2:0] is defined in the XDR I/O Cell specification. 


Related Registers: 

e Yreg_YDRAM_Dta 
e Yreg_YRAC_Dta 
e Yreg_Init_Ctl 

e Yreg_Init_Cnts 
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7.5.4 Initialization Control Register n [n = 0,1] (Yreg_Init_Ctl_n [n = 0,1]) 


This register controls the initialization sequencers. This register is used during the configuration of the 
memory channel by providing control of the initialization process. 











Register Short Name Yreg_Init_Ctl_o Privilege Type Privilege 1 
Yreg_Init_Ctl_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A118’ Memory Map Area MIC and TKM 

BE_MMIO_Base xX‘50A158' 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 














































































































Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
2 
S = 
2 = YS 0 I 
3 Oe § © ESesu 
> Fees. ES eu BEES 
8 QS sG8@LSZBSOQOurae zee sR 
© 000 2 => £ bd N € @ @ c€& Y R d 
£t ©~eraststEnrure as woe 5X & eserve 
> 
Sn ee ee ee ee en a T 
O 1/2;);3)4/;5;)6)7) 8/9 |10)11)12/13)14)15/16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
2 RefOnlyDisable Disable the Refresh Only function during initialization. 
Reset initialization sequencer. (Lab only) 
; 0 Do not reset the initialization sequencer. 
3 Resetinit ate 
1 Do a reset on the initialization sequencer. 
You must write a zero to return to normal mode. 
Disables the sequencer aid in calibration. [make sequencer ignore pat_ena] (Lab Only) 
, 0 Enable the initial calibration sequencer. 
| 
7 Bisaniege 1 Disable the initial calibration sequencer. 
You must write a zero to return to normal mode. 
WDSL mode. Supports the Write Data Serial mode of the XDR DRAMs. 
5 WDSL 0 Normal command issuing mode. 
1 Issue commands to support the WDSL sequence of the XDR initialization guide. 
You must write a zero to return to normal mode. 
Write-to-read turns writes into reads with compares. (Lab only) 
0 Normal command interpretation. 
WrToR 
fToRd 1 Writes are turned into reads with expect data. 
You must write a zero to return to normal mode. 
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Bits 


Field Name 


Description 








InitMode 


Initialization mode. Sent to the CTL partition during initial RX and TX calibration. 

0 Normal execution mode. 

1 Initial XIO RX and TX Calibration support. 

Note: To allow the control hardware to clean up its entries, wait at least 200 NClks from when this 
bit transitions from a ‘1’ to a ‘0’ at the end of calibration. No writes to the MIC MMIO space, main 
memory, Pervasive register space, or Token Manager should be sent during this time. 

If you have two halves of memory populated, you must write both Yreg_Init_Ctl registers sequen- 
tially with no other MMIO, read, or write between them. There needs to be 50 NCIk cycles (in addi- 
tion to the time between MMIO commands) between enabling InitMode on each half. 





ReVal 


Revalidates commands in the CTL partition. Read returns 0. (Lab only) 

0 Do not revalidate the command queues. 

1 Revalidate the command queues. Yreg_Init_Ctl[7] must be set to ‘1’. 
A single write causes this action. 





10 


FrzCmd 


UnFrz 


Freezes command issuing. Read returns 0. 

0 Do not freeze the issuance of commands to the XIO cell. 

1 Freeze issuing commands, including refreshes, to the XIO cell. 
You must write a zero to return to normal state. 


Lab only. Unfreezes the take command interface. Read returns 0. 
0 Do not unfreeze the command queue. 

1 Unfreeze the command queue. 

A single write starts this action. 





11 


SetPatMrkr 


Drives PAT_MRKR. Read returns 0. (Lab only) 

0 Do not manually drive PAT_MRKR to the XIO cell. 
1 Manual drive PAT_MRKR to the XIO cell. 

A single write starts this action. 





12 


ResetPatMrkr 


Stop driving PAT_MRKR. Read returns 0. (Lab only) 

0 Do not reset the driving of PAT_MRKR to the XIO cell. 
1 Quit driving PAT_MRKR to the XIO cell. 

A single write starts this action. 





13 


UnFrzCmd 


Unfreeze the command logic for any reason. Read returns 0. (Lab only) 
0 Do not force the command logic to take new commands. 

1 Force the command acceptance logic to take commands. 

A single write starts this action. 





14 


XlOReset 


Cause a reg_reset to the XIO cell. If doing this as part of a soft reset, make sure this signal is 
asserted for at least the duration of an XDR DRAM register access. 


0 Do not cause an XIO cell register reset. 

1 Drive the XIO cell register signal. 

Note: Do not attempt a Yreg_YRAC_Dta access or a Yreg_YDRAM_Dta access during this time. 
All accesses are lost, the first access captured, and a recoverable error reported. You must write 
this bit back to zero to turn off refreshes. 





15 


WDSLCLH 


Controls which half of a cache line is written during the XDR Write Data Serial Load (WDSL) pattern 
load step. This bit is effectively set to ‘0’ when the WDSL Mode bit (Yreg_Init_Ctl[5]) is set to ‘0’. 
This bit should only be set when Burst Length (BL) = 16. 


0 Access the first half (64 bytes) of a cache line. 
1 Access the second half (64 bytes) of a cache line. 











16:63 


Reserved 








Bits are not implemented; all bits read back zero. 





Version 1.5 
April 2, 2007 


Memory Interface Controller (MIC) MMIO Registers 
Page 193 of 357 


Registers 


Cell Broadband Engine 
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e Yreg_YDRAM_Dta 
Yreg_YRAC_Dta 
MIC_Yreg_Stat 
Yreg_Init_Cnts 
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7.5.5 Initialization Constants Register n [n = 0,1] (Yreg_Init_Cnts_n [n = 0,1]) 


This configuration register controls certain constants that are used for initialization and for periodic timing cali- 
bration. Both Yreg_Init_Cnts registers (one for each half) must be set to the same value. 











Register Short Name Yreg_Init_Cnts_0 Privilege Type Privilege 1 
Yreg_Init_Cnts_1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘50A120’ Memory Map Area MIC and TKM 

BE_MMIO_Base x'50A160’ 





Value at Initial POR 


All bits set to zero Value During POR Set By = Scan initialization during POR 













































































Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
T 
O 
ke 
a 
“ P s 
ir og 
G43 = 3 
x * © o E 
£ € ā tPMT Vau S$ & Reserved 
> 
TETRA tr4y 
0/1/23 4 5 6/7/89 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Receive Clock Enable drives the XIO cell pin. 
0 RelkEn 0 Drive the RCLK_EN pin to a 0 (turn off receive). 
1 Drive the RCLK_EN pin toa 1. 
Transmit Clock Enable drives the XIO cell pin. 
0 Drive the TCLK_EN pin to a 0 (turn off transmit). 
1 TClkEn 1 Drive the TCLK_EN pin to a 1 
During initialization and normal operation, this field is normally set to ‘1’. The type of clock enabling 
(constant or dynamic) is controlled by DynClkEna (Yreg_Init_Cnts[8)}). 
Disables error reporting to the MIC FIR Register only. The Yreg_YDRAM_Dta Register still records 
, the error. 
2 DisRecErr 0 Report any XIO cell or XDR DRAM register errors to the MIC_FIR Register. 
1 Do not report any XIO cell or XDR DRAM register errors to the MIC_FIR Register. 
3:6 tPMT_Value tPMT - tRCD - W - tQTD - 2; if negative, enter ‘0000’. 
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Bits Field Name Description 
Use read complete for timing calibration. 
Only affects the read complete to dataflow. PTCal should be shut off by using XIO register writes 
7 Use RC For PTCal before this bit is changed. PTCal can be turned on again after this bit has changed. Dataflow cap- 
Se_N_For_ al tures PTCal pattern data if it gets a read complete for a timing calibration. 
0 Normal operation. 
1 For debug purposes only. 
The dynamic clock gating function is only implemented for TCIkEn. 
0 Normal operation. Dynamic clock gating is not enabled. The transmit clock enable pin is 
driven to a constant 1. 
1 Dynamic clock gating enabled. The transmit clock enable pin turns off for power savings 
8 DynClkEna when there is no activity on the memory interface. 
To take advantage of this power saving mode, Yreg_Init_Cnts[1] of this register should be set to ‘1’ 
and Yreg_Init_Cnts[8] set to ‘1’. To disable this feature, set Yreg_Init_Cnts[8] to ‘0’. The system 
must not have any pending stores when Yreg_Init_Cnts[8] goes to ‘1’ when enabling this mode. It is 
necessary to adhere to any other restrictions placed on these bits from the CBE XIO addendum to 
the XDR I/O Cell specification. 
9:16 Reserved Reserved. Software should ignore value read and write only zeros. 
17:63 Reserved Bits are not implemented; all bits read back zero. 











Related Registers: 
e MIC_Yreg_Stat 
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7.5.6 MIC Periodic Timing Calibration Address Register n [n = 0,1] (MIC_PTCal_Adr_n [n = 0,1]) 


The 28 bits of the MIC_PTCal_Adr Register specify the address of the cache line in memory to be set aside 
for periodic timing calibrations. When both memory channels are populated, there are two cache lines set 
aside for periodic timing calibrations. Typically, these two registers are set to the same value so that the two 
cache lines are contiguous in the system memory map. After startup, these values should not be changed by 
hardware or software. 


The address is typically in the protected from scrub region (See MIC_Calibration_Addr_0 and 
MIC_Calibration_Addr_1). 


















































Register Short Name MIC_PTCal_Adr_O Privilege Type Privilege 1 
MIC_PTCal_Adr_1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A130’ Memory Map Area MIC and TKM 
BE_MMIO_Base x‘50A170° 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
PTCal_Address Reserved 
4 Y $ > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27/28 29 30 31 
Reserved 





4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 











Bits Field Name Description 








The 28 most significant real address bits of the periodic timing calibration cache line. 
Real (EIB) Address[28:55], if both memory channels are populated. 

















0:27 PTCal_Add - , 
A SSR Real (EIB) Address[29:56], if only one memory channel is populated. 
This value must fall within the specified range of memory. 
28:63 Reserved Bits are not implemented; all bits read back zero. 
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7.5.7 MIC Refresh and Scrub Register (MIC_Ref_Scb) 


This register contains values that control the scheduling of refreshes and scrubs. If the MIC is in slow mode, 
the refresh or scrub rates cannot be increased to extreme values. If this happened, commands would be 
paced, and due to the slower NCIk, the MIC would be unable to squeeze a command in between the 


refreshes or scrubs. 


Note: After startup, these values should not be changed by hardware or software. 











BE_MMIO_Base 


Register Short Name MIC_Ref_Scb Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A200’ Memory Map Area MIC and TKM 





Value at Initial POR 


All bits set to zero Value During POR Set By Scan initialization during POR 












































Specification Type Implementation-specific register | Unit MIC (MIC_CTL) 
Refresh_CLValue ScrubCLValue Reserved 
> 
4 vy vv 
0 1 2 3 4 5 6 7 8 9 10 11 12/13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28/29 30 31 
Reserved 
s 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name 


Description 








0:12 Refresh_CLValue 


Refresh Counter Load Value. 

The value of bits [0:12] plus 1 multiplied by tCYCLE gives the period between Refresh commands 
to the XDR DRAMs. The minimum value allowed for this field is ‘1’. The hardware does not issue 
refreshes faster than the effective row cycle time of write or reads due to precharge command 
restrictions. 

The period between Refresh commands from the spec is tREF/(2“(# Bank Address bits + # Row 
Address Bits)). 





13:28 ScrubCLValue 


Scrub Counter Load Value. 


Assuming the 10 us Timer is programmed to tick every 10 us, the value of bits [13:28] plus 1 multi- 
plied by 10 us should equal the interval between scrubs. For example (and this is the maximum 
scrub interval supported), to scrub 64 MB every 2 days is equivalent to 262144 128-byte accesses 
per day, and the time per access is every 329.5 ms. This is the scrub interval. When defined as 
access time per 10 us, 329.5 ms/10 us = 32950 = x‘80B6’. Subtracting ‘1’ leaves the value x‘80B5’ 
to be written into the bits [13:28]. The minimum value allowed for this field is ‘1’. 





29:63 Reserved 














Bits are not implemented; all bits read back zero. 
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7.5.8 MIC Execute Register (MIC_Exc) 


This register allows software to kick off and monitor more complex YC actions. After startup, these values can 
change. Software can write bits and hardware can clear certain bits. 
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Register Short Name MIC_Exc Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A208’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
x= Hi cl aa 
oa 8 3 z 
e 5 5 = 8 3 S 
Sen o A = a O 
2 č Exx LA 
Smaps set & 
§aoaomnoece Reserved 
> 
a A 2 A 2 
| 0 1/12/3/41/15]6/7/8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
i 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Zero memory. 
Setting this bit initializes memory to all zeros. This bit may be set after the XDR DRAMs and XIO 

0 ZeroMem Cells have been initialized, and before normal operation. This bit automatically clears once all of 
memory is zeroed. Worst-case duration (zeroing two 32 GB halves in parallel) is approximately 
2.68 s with nominal frequencies. 

Begin refreshes. 

1 BeginRefresh Software sets this bit when XIO cell and XDR DRAM initialization is complete. The rising edge starts 
scheduling refreshes. After this bit is written to ‘1’, it must always be written to ‘1’. Use MIC_Exc[3] 
to turn refreshes off and back on, if necessary. 

Begin scrubs. 

2 BeginScrub Software sets this bit when XIO cell and XDR DRAM initialization complete and scrubbing is 
needed. The rising edge starts scheduling scrubs. After this bit is written to ‘1’, it must always be 
written to ‘1’. Use MIC_Exc[3] to turn Scrubs off and back on, if necessary. 

Block refresh pulses. 

3 BlockRefresh Setting this bit does not block RefAll, an indication to refresh all banks sequentially, and is only used 
for initialization and for PDN entry and exit. 
Block scrub pulses. 

$ Block_Scrub Setting this bit does not block Fast Scrubbing. 
Refresh all. 
Setting this bit kicks off a refresh to each of the internal DRAM banks sequentially. Software may do 
this during initialization or during PDN entry or exit. Be aware that the RefAll does not start until the 
MicCtl read and write command queues are empty. This bit automatically clears once the last 

5 RefAll refresh of the sequence has been taken by YC. The last refresh is completed ~tRC after this event. 
For more precision, MIC_Yreg_Stat[8] can be monitored: when it becomes set following this event, 
the last refresh has been completed. Once the RefAll bit is set, no commands should be issued to 
the MIC until this bit clears (except, obviously, for the polling of this bit). See the ‘REFI at end of Ref 
All’ bit of this same register. 
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Bits Field Name Description 
REFI at end of Ref All. 
This bit should be written at the same time as the Ref All bit and not changed while Ref All is 

6 REFI_RefAll asserted. 

0 No 
1 Yes 
Do Fast Scrub. 

7 FastScrub Setting this bit scrubs all of memory as fast as possible. This is intended to be used after the XDR 
DRAMs are brought out of PDN, to correct single-bit errors that may have accumulated. This bit 
automatically clears once all of memory has been scrubbed. 

8:63 Reserved Bits are not implemented; all bits read back zero. 
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7.5.9 MIC Maintenance Config Register (MIC_Mnt_Cfg) 
After startup, these values should not be changed by hardware or software. 


This register supplements Section 7.5.6 MIC Periodic Timing Calibration Address Register n [n = 0,1] 
(MIC_PTCal_Adr_n [n = 0,1]). 












































Register Short Name MIC_Mnt_Cfg Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A210’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_YC macro) 
Q 
O 
A 
n 
p= 
(8) 
€ 
10TLValue € Reserved 
> 
M 4 44y 
[o 1 2 3 4 5 6 7 891011 12/13 14/15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name Description 








10-usec Timer Load Value 
0:12 10TLValue The 10-usec timer is used to count scrub intervals. The minimum value allowed for this field is 1. 
(value of bits [0:12] + 1) x tCYCLE = 10 usec 





Indicates which memory channel(s) is populated 


00 Invalid 

01 Only memory channel 0 is populated 

10 Only memory channel 1 is populated 
13:14 MemChsPop 11 Both memory channels are populated 


Note: If a write to this register occurs that changes the MemChsPop field (call this X), another com- 
mand to the MIC (read or write) cannot appear on the EIB until a minimum of 200 NCIks after X 
appeared on the EIB. The Ctl partition requires this delay. 


Used to direct maintenance outputs to one or both halves of MIC, and to filter maintenance inputs 
from one or both halves of MIC. 





15:63 Reserved Bits are not implemented; all bits read back zero. 
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7.6 Dataflow (DF) Registers 


7.6.1 MIC Dataflow Configuration Register (MIC_DF_Config) 


This register sets user preferences for error checks and some timing for special modes. 











































































































Register Short Name MIC_DF_Config Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A218’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC (YM_DF macro) 
2 Z 8 
= = = T 
? 3 8 2 © © a 
3 2 2 gs 2 2 g 
2 %5 2 SF 5 © 
0 2 "o O 2 a D Q 
JAg I0 g 2 = 
O > 1 6 D © 
O 46 # O @ o O 
& Q @ Async _Delayo © Q @ Async_Delayi @ E Reserved 
44y t444 Y,yy yd 
0;1);2);3 4 5 6/7/8910 11 12 13/14 15/16 17/18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Disable parity reporting for XIOO. 
: F 0 Enables parity checking when capturing auxiliary trace data. Also used for normal func- 
0 Parity_DisableO tional mode. 
1 Disables parity reporting for XIOO. 
1 ECC_DisableO Disable ECC Off for XIOO (includes correction and reporting). 
Single bit or multibit error reporting for XIOO. 
2 Report_SingleBitO |O Multibit only. 
1 Single or multibit. 
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Bits Field Name Description 
Asynchronous read delay for XDR I/O Cello. 

0000 If MiCIk/NClk > 0.50 
0001 If MiCIk/NCIk > 0.45 
0011 If MiCIk/NClk > 0.40 
0101 If MiCIk/NClk > 0.35 
0111 If MiCIk/NClk > 0.30 
1111 If in slow memory mode (PLL BYPASS) 

3:6 Async_DelayO Note: For results greater than 15, set this register to 15. For negative values, set this register to 0. 
When the NCIk frequency changes for power management slow(n) mode, this register does not 
need to be changed. In other words, set this using the highest NCIk frequency. 

For ratios not shown, use the following equation to determine the register value: 
delay = 18 - 38 x (MiCIk/NCIk) 
It is always safe to program this register to ‘1111’. A small read latency impact can be observed if 
the value ‘1111’ is used. 
This value has a different programming value for slow core mode. 
Disable parity reporting for XIO1. 
7 Parity_Disable1 0 Enables parity checking when capturing auxiliary trace data. Also used for normal func- 
tional mode. 
1 Disables parity reporting for XIO1. 
8 ECC_Disable1 Disable ECC Off for XIO1 (includes correction and reporting). 
Single bit or multibit error reporting for XIO1. 
9 Report_SingleBit1 0 Multibit only. 
1 Single or multibit. 
Asynchronous read delay for XDR I/O Cell1 
0000 If MiCIk/NClk > 0.50 
0001 If MiCIk/NClk > 0.45 
0011 If MiCIk/NClk > 0.40 
0101 If MiCIk/NClk > 0.35 
0111 If MiCIk/NClk > 0.30 
1111 If in slow memory mode (PLL BYPASS). 

10:13 Async_Delay1 Note: For results greater than 15, set this register to 15. For negative values, set this register to 0. 
When the NCIk frequency changes for power management slow(n) mode, this register does not 
need to be changed. In other words, set this using the highest NCIk frequency. 

For MiClk frequencies lower than 1.2 GHz, or for combinations in which the NCIk frequency is not 4 
GHz, use the following equation to determine the register value: 
delay = 18 - 38 x (MiCIk/NCIk) 
It is always safe to program this register to ‘1111’ A small read latency impact can be observed if the 
value ‘1111’ is used. 
This value has a different programming value for slow core mode. 
14:15 Reserved Bits are not implemented; all bits read back zero. 
Selects which of the two halves of the MIC Dataflow XIO PTCal registers to write: 
bit 16: O write the first half of MIC_XIO_PTCal_Data_O (memory channel 0) 
1 write the second half of MIC_XIO_PTCal_Data_0 (memory channel 0) 
16:17 PTCal_Data_Select bit 17: 0 write the first half of MIC_XIO_PTCal_Data_1 (memory channel 1) 
1 write the second half of MIC_XIO_PTCal_Data_1 (memory channel 1) 
See the MIC Dataflow XIO PTCal Register n [n = 0,1] (MIC_XIO_PTCal_Data_n [n = 0,1]) for more 
information. 

18:63 Reserved Bits are not implemented; all bits read back zero. 
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7.7 MIC Fault Isolation and Checkstop Enable Registers 


7.7.1 MIC FIR/Checkstop Enable/Reset/Set Registers (MIC_FIR) 


This section defines the MIC Fault Isolation Registers (FIRs). Because the reset, set, and direct write of the 
FIR are all in the same register, special care must be taken to ensure the correct function occurs. The 
following examples assume a checkstop enable setting of '1111_1101_0100_000': 


e To direct write the FIR, the MMIO_Reset field must be all ones (1) and the MMIO_Set field must be all 
zeros (0). For a direct write of '1111_1111_1111_111', the register write is x'FFFEFD40_FFFE0000'. 


e To use the MMIO_Reset field, the direct write and MMIO_Set fields should be all zeros (0). 
To reset the register using '0000_0000_0000_000', the register write is x‘OOOOFD40_O00000000'. 


e To use the MMIO_Set field, the direct write field must be all zeros (0) and the MMIO_Reset field must be 
all ones (1), since this field is used in the feedback path from the FIR. To Set in '1111_1111_1111_111' 
using the MMIO_Set field, the register write is x'O0O0OFD40_FFFEFFFE’. 


























Register Short Name MIC_FIR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A230’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR x‘00000000_FFFE0000’ Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit MIC 

O 

D 

2 

D 

MIC_FIR £ Checkstop_Enable 


































































































O 
D 
Z 
o 
N 
© 
£ 
M 4 4 y vy 
012 3 4 5 6 7 8 9 10 11 12 13 14/15|16 17 18 19 20 21 22 23 24 25 26 27 28 29 30/31 
xo} xo} 
o o 
> > 
o © 
wn N 
MMIO_Reset £ MMIO_Set £ 
M $ 4 y vy 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46/47/48 49 50 51 52 53 54 55 56 57 58 59 60 61 62/63 
Recommended 
Mask Settings 
Bits Description ean 
eckstop 
Error Mask Enable 
0 Write SRAM parity error 0 (checkstop) 0 1 
1 Write SRAM parity error 1 (checkstop) 0 1 
2 Read SRAM parity error 0 (checkstop) 0 1 
3 Read SRAM parity error 1 (checkstop) 0 1 
4 Read SRAM parity error 2 (checkstop) 0 1 
5 Data error (DERR) received on write data (checkstop) 0 1 
6 Read data single-bit error correction code (ECC) error O (recoverable) 0 0 
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Recommended 
Mask Settings 
Bits Description Cae 
eckstop 
Error Mask Enable 
7 Read data multiple-bit ECC error 0 (checkstop) 0 1 
Read data single-bit ECC error 1 (recoverable) (0) (0) 
9 Read data multiple-bit ECC error 1 (checkstop) (0) 1 
10 Byte bus master write error (recoverable) 0 0 
11 Byte bus master read error (recoverable) 0 0 
12 Rambus Register overflow 0 (recoverable) 0 0 
13 Rambus Register overflow 1 (recoverable) 0 0 
14 Auxiliary trace overflow error (recoverable) 0 0 
Bits Field Name Description 
Direct set of FIR. See previous table for errors corresponding to each bit. 
0:14 MIC_FIR To directly set the FIR, set this field to the desired FIR value; and set the MMIO_Reset field to all 
ones and the MMIO_Set field to all zeros. 
15 Reserved Bit is not implemented; bit reads back zero. 
16:30 Checkstop_Enable Directs certain errors in the FIR to cause a checkstop. If the error is not a checkstop, it is considered 
recoverable. 
31 Reserved Bit is not implemented; bit reads back zero. 
MMIO reset is used to reset the FIR. 
x‘0000’ Resets the bit. 
eee MMO HESSI x‘0001’ Maintains the original setting of the bit. 
Note: For this field to work properly, the FIR and MMIO_Set fields must be written with all zeros. 
47 Reserved Bit is not implemented; bit reads back zero. 
MMIO set is used to set the FIR. 
x‘0000’ Maintains the original setting of the bit. 
48:62 MMIO_Set x‘0001’ Sets the bit. 
Note: For this field to work properly, the FIR field must be written with all zeros and the 
MMIO_Reset field must be written with all ones. 
63 Reserved Bit is not implemented; bit reads back zero. 
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7.7.2 MIC ErrorMask/RecErrorEnable/Debug Control Register (MIC_FIR_Debug) 











Register Short Name MIC_FIR_Debug Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50A238’ Memory Map Area MIC and TKM 


BE_MMIO_Base 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 


































































































Specification Type Implementation-specific register | Unit MIC (YM_DF) 
xo} O 
D D 
2 2 
o o 
N N 
Error_Mask £ Recoverable_Error_Enable £ 
4 $ 4 y vv 
012 3 4 5 6 7 8 9 10 11 12 13 14/15/16 17 18 19 20 21 22 23 24 25 26 27 28 29 30/31 
Debug_Control LFSR Reserved 
M 4 y vv 4 
32 33 34 35/36 37 38 39 40 41/42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Masks bits in FIR so that they do not cause errors (recoverable or checkstop). 
x‘0000’ Allows the error to be reported as a checkstop or recoverable. 
0:14 Error_Mask : ; i E 
x‘0001’ Blocks the reporting of the error; however, the FIR bit is still set. 
See the MIC_FIR table for errors corresponding to each of the 15 bits. 
15 Reserved Bit is not implemented; bit reads back zero. 
R le E E Directs certain errors in the FIR to be counted in the Linear Feedback Shift Register (LFSR). 
16:30 alla rror_Ena The Checkstop Enable field of the MIC_FIR is used to set which errors cause a recoverable error. 
See table for the MIC_FIR for errors corresponding to each of the 15 bits. 
31 Reserved Bit is not implemented; bit reads back zero. 
32:35 Debug_Control Control for trace bus 
36:41 LFSR Direct set or reset of the LFSR counter 
42:63 Reserved Bits are not implemented; all bits read back zero. 
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8. Token Manager (TKM) MMIO Registers 


This section describes the TKM memory map and lists the TKM registers. The shared MIC and TKM memory 
space starts at x‘50A000’ and ends at x‘SOAFFF’. Offsets are from the start of the shared MIC and TKM 
register space. For the complete CBE MMIO memory map, see Section 1 Cell Broadband Engine Memory- 
Mapped I/O Registers on page 19. 
The following notes apply to the register bit definitions: 

e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


8.1 TKM MMIO Memory Map 


Table 8-1. TKM MMIO Memory Map 






































w Register Name and (Short Name) Ga Pea Additional Information 
(x‘50Annr’) 
x‘FCO’ Reserved 
x‘FC8’ TKM Memory Bank Allocation Register (TKM_MBAR) 64 | RW _ Section 8.2.1 on page 208 
x‘FDO’ TKM IOIFO Allocation Register (TKM_IOIFO_AR) 64 | RW Section 8.2.2 on page 210 
x‘FD8’ TKM IOIF1 Allocation Register (TKM_IOIF1_AR) 64 | RW _ Section 8.2.3 on page 212 
x‘FEO’ TKM Priority Register (TKM_PR) 64 | RW |Section 8.2.4 on page 214 
x‘FE8’ TKM Interrupt Status Register (TKM_IS) 64 | RW | Section 8.2.5 on page 217 
X‘FFO’ TKM Performance Monitor Control Register (TKM_PMCR)| 64 R/W | Section 8.2.6 on page 218 
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8.2 TKM MMIO Register Descriptions 


8.2.1 TKM Memory Bank Allocation Register (TKM_MBAR) 


TKM Memory Bank Allocation Register defines the number of EIB clock cycles between the generation of 
memory tokens for each Research Allocation Group (RAG). This period is defined by a Pr field and an Ir field 
for each RAG r, where ris an element of {U, 0, 1, 2, 3}, and by the IMSB field. The number of EIB clock cycles 
between subsequent generation of memory bank tokens for RAG ris (I + 1 + 8 x ((P>0) OR TKM_MBAR{[83]) 
x 2P) where | is the value of the Ir field and P is the value of the Pr field; ris an element of {U, 0, 1, 2, 3}. 


Eight plus the value of an Irfield is loaded into the RAG rmemory rate decrementer when the Memory Bank 
Allocation Register 0 is written or when the RAG rmemory rate decrementer expires. When a rate decre- 
menter is zero and is to be decremented again, the rate decrementer expires. Not only does the rate decre- 
menter have to be zero, but it also must be decremented again, at which time it is loaded again based on the 
allocation. The memory rate decrementer is decremented one out of 2P EIB clocks. The RAG’s memory rate 
decrementer is used to generate tokens if enabled by the corresponding TKM_CR Register Rate Counter bit. 


The valid values for the Pr field are decimal 0 to 7. 






















































































Register Short Name TKM_MBAR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50AFC8’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit TKM 
Reserved 
> 

M 

012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
E 

Pa 

© m 

9 N 
ce PU IU PO 10 P1 i P2 12 P3 13 
Vu 4 y + y 4 y4 + y YY vy 4 y4 + y YY 4 
32 | 33/34 35 36/37 38 39/40 41 42|43 44 45|46 47 48|49 50 51/52 53 54|55 56 57/58 59 60/61 62 63 

Bits Field Name Description 

0:32 Reserved Bits are not implemented; all bits read back zero. 





Interval most significant bit. This bit allows higher allocation rates for one RAG. 


0 When a RAG’s memory rate decrementer would decrement below zero, the most signifi- 
cant bit of the 4-bit interval value is based on the RAG’s prescaler value: --If the RAG’s 
prescaler value is zero, a ‘0’ is loaded. Only one of a RAG’s prescaler values can be zero. 

33 IMSB Otherwise, memory is over-allocated and tokens may be lost. 


e Ifthe RAG’s prescaler value is nonzero, a ‘1’ is loaded. 


1 When a RAG’s memory rate decrementer would decrement below zero, a ‘1’ is loaded into 
the most significant bit of the 4-bit interval value loaded into each RAG’s memory rate dec- 
remeniter. 





PU Prescaler for RAG U, where RAG U Memory Rate Decrementer is decremented every one out of 


oe 2PU EIB clock cycles, or NCIK/2. 
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Bits Field Name Description 

37:39 lU Least significant 3 bits of the 4-bit interval value loaded into the RAG U Memory Rate Decrementer 
when the Memory Rate Decrementer U would decrement below zero. 

40:42 Po Prescaler for RAG 0, where RAG 0 Memory Rate Decrementer is decremented once every 2P0 EIB 
i clock cycles. 

43:45 lo Least significant 3 bits of the 4-bit interval value loaded into the RAG 0 Memory Rate Decrementer 
, when the Memory Rate Decrementer 0 would decrement below zero. 

46:48 P1 Prescaler for RAG 1, where RAG 1 Memory Rate Decrementer is decremented once every 2P1 EIB 
f clock cycles. 

49:51 H Least significant 3 bits of the 4-bit interval value loaded into the RAG 1 Memory Rate Decrementer 
i when the Memory Rate Decrementer 1 would decrement below zero. 

52:54 P2 Prescaler for RAG 2, where RAG 2 Memory Rate Decrementer is decremented once every 2P2 EIB 
i clock cycles. 

55:57 12 Least significant 3 bits of the 4-bit interval value loaded into the RAG 2 Memory Rate Decrementer 
` when the Memory Rate Decrementer 2 would decrement below zero. 

58:60 P3 Prescaler for RAG 3, where RAG 3 Memory Rate Decrementer is decremented once every 2P3 EIB 
i clock cycles. 

61:63 13 Least significant 3 bits of the 4-bit interval value loaded into the RAG 3 Memory Rate Decrementer 
` when the Memory Rate Decrementer 3 would decrement below zero. 





Programming Note: The following sequence must be performed for the bank id counters for each RAG to be 
initialized correctly when changing TKM_MBAR. 


1. MMIO Write TKM_CR, disable all Ri bits. 

2. MMIO Write TKM_MBAR, set all to x‘0’. 

3. MMIO Write TKM_MBAR, set new allocation values. 

4. MMIO Write TKM_CR, reenable Ri bits of selected RAGs. 


Also, for each type of token allocation (Memory, IOIFOIn, |OlFOOut, IOIF 11n, |OIF1 Out), the relationship of 
token allocation rates between any two RAGs can prevent the sharing of tokens to the RAG with one 
requester. When X is (U,0,1,2,3), Y is (0,1,2,3), and RAGY has one requestor in its group, then the allocated 
percentage for RAGY should not be an intregral multiple of that for RAGX when RAGxX is enabled to share its 
tokens with RAGY. 
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8.2.2 TKM IOIFO Allocation Register (TKM_IOIFO_AR) 


TKM IOIFO Allocation Register defines the number of EIB clock cycles between the generation of IOIFO In 
bus tokens and between IOIFO Out bus tokens for each RAG. For IOIFO In, this period is defined by a IPr field 
and an Ilr field for each RAG r. For IOIFO Out, this period is defined by a OPr field and an Olr field for each 
RAG r, where ris an element of {U, 0, 1, 2, 3}. The number of EIB clock cycles between subsequent genera- 
tion of IOIFO In tokens for RAG ris (9 + I) x 2”, where /is the value of the Ilr field and P is the value of the IPr 
field; ris an element of {U, 0, 1, 2, 3}. Likewise, the number of EIB clock cycles between subsequent genera- 
tion of IOIFO Out tokens for RAG ris (9 + /) x 2? where /is the value of the Olr field and P is the value of the 
OPr field; ris an element of {U, 0, 1, 2, 3}. 


Eight plus the value of an Ilr is loaded into RAG rlOIFO In rate decrementer when the RAG rlOIFO In rate 
decrementer expires. When a rate decrementer is zero and is to be decremented again, the rate decrementer 
expires. Not only does the rate decrementer have to be zero, but it also must be decremented again, at which 
time it is loaded again based on the allocation. The RAG rlOIFO In rate decrementer is decremented one out 
of 2” EIB clocks, where P is the value of the Prescaler field. The RAG rlOIFO In rate decrementer is used to 
generate tokens if enabled by the corresponding TKM_CR Register RAG r Rate Counters Enable bit. The 
RAG rlOIFO Out rate decrementer functions in a similar manner using the Olr and OPr fields. 


Valid values for the prescaler fields are 0 to 7. 













































































Register Short Name TKM_IOIFO_AR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50AFDO’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit TKM 

O 

o 

2 

2 

£ IPU IIU IPO l0 IP1 th IP2 112 IP3 3 
vv y v¥ 4 y 4 4 4 y 4 4 4 y 4 4 4 y 4 4 4 
O 1/2 3 4/5 6 7/8 9 10|11 12 13|14 15 16|17 18 19|20 21 22/23 24 25/26 27 28|29 30 31 

9 

> 

3 

£ OPU OIU OPO olo OP1 Ol OP2 ol2 OP3 O13 





y vy 4 y + y 4 y + y 4 y + y vv + 4 vy 4 
32 33/34 35 36/37 38 39|40 41 42/43 44 45|46 47 48/49 50 51/52 53 54/55 56 57|58 59 60/61 62 63 


















































Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
2:4 IPU IOIFO In Prescaler for RAG U, where RAG U IOIFO In Rate Decrementer is decremented once 


every 2'PU EIB clock cycles. 





5:7 IlU Interval for RAG U, where (IIU + 8) is loaded into the RAG U IOIFO In Rate Decrementer when RAG 
. U IOIFO In Rate Decrementer would be decremented below zero. 





8:10 IPO IOIFO In Prescaler for RAG 0, where RAG 0 IOIFO In Rate Decrementer is decremented every one 
i out of 2!P° EIB clock cycles 
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Bits Field Name Description 

11:13 ilo Interval for RAG 0, where (IlO + 8) is loaded into the RAG 0 IOIFO In Rate Decrementer when RAG 
i 0 IOIFO In Rate Decrementer would be decremented below zero. 

14:16 IP4 IOIFO In Prescaler for RAG 1, where RAG 1 IOIFO In Rate Decrementer is decremented every one 
: out of 2!" EIB clock cycles 

17:19 1 Interval for RAG 1, where (II1 + 8) is loaded into the RAG 1 IOIFO In Rate Decrementer when RAG 
. 1 IOIFO In Rate Decrementer would be decremented below zero. 

20:22 IP2 IOIFO In Prescaler for RAG 2, where RAG 2 IOIFO In Rate Decrementer is decremented every one 
; out of 2!P2 EIB clock cycles 

23:25 12 Interval for RAG 2, where (II2 + 8) is loaded into the RAG 2 IOIFO In Rate Decrementer when RAG 
i 2 IOIFO In Rate Decrementer would be decremented below zero. 

26:28 IP3 IOIFO In Prescaler for RAG 3, where RAG 3 IOIFO In Rate Decrementer is decremented every one 
; out of 2!P3 EIB clock cycles 

29:31 113 Interval for RAG 3, where (II3 + 8) is loaded into the RAG 3 IOIFO In Rate Decrementer when RAG 
. 3 IOIFO In Rate Decrementer would be decremented below zero. 

32:33 Reserved Bits are not implemented; all bits read back zero. 

34:36 OPU IOIFO Out Prescaler for RAG U, where RAG U IOIFO Out Rate Decrementer is decremented every 
i one out of 20PU EIB clock cycles 

37:39 Olu Interval for RAG U, where (OIU + 8) is loaded into the RAG U IOIFO Out Rate Decrementer when 
` RAG U IOIFO Out Rate Decrementer would be decremented below zero. 

40:42 OPO IOIFO Out Prescaler for RAG 0, where RAG 0 IOIFO Out Rate Decrementer is decremented every 
i one out of 20P° EIB clock cycles 

43:45 olo Interval for RAG 0, where (OI0 + 8) is loaded into the RAG 0 IOIFO Out Rate Decrementer when 
i RAG 0 IOIFO Out Rate Decrementer would be decremented below zero. 

46:48 OP1 IOIFO Out Prescaler for RAG 1, where RAG 1 IOIFO Out Rate Decrementer is decremented every 
i one out of 20P1 EIB clock cycles 

49:51 ol Interval for RAG 1, where (Ol1 + 8) is loaded into the RAG 1 IOIFO Out Rate Decrementer when 
: RAG 1 IOIFO Out Rate Decrementer would be decremented below zero. 

52:54 OP2 IOIFO Out Prescaler for RAG 2, where RAG 2 IOIFO Out Rate Decrementer is decremented every 
one out of 20P2 EIB clock cycles 

55:57 ole Interval for RAG 2, where (Ol2 + 8) is loaded into the RAG 2 IOIFO Out Rate Decrementer when 
` RAG 2 IOIFO Out Rate Decrementer would be decremented below zero. 

58:60 OP3 IOIFO Out Prescaler for RAG 3, where RAG 3 IOIFO Out Rate Decrementer is decremented every 
i one out of 2P3 EIB clock cycles 

61:63 O13 Interval for RAG 3, where (OI3 + 8) is loaded into the RAG 3 IOIFO Out Rate Decrementer when 
i RAG 3 IOIFO Out Rate Decrementer would be decremented below zero. 
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8.2.3 TKM IOIF1 Allocation Register (TKM_IOIF1_AR) 


TKM IOIF1 Allocation Register is similar to TKM IOIFO Allocation Register except that it is used to manage 
the IOIF1 In and IOIF1 Out bus and there is an additional implied prescaler. The number of EIB clock cycles 
between subsequent generation of IOIF1 In tokens for RAG ris (9 + /) x 2'°*2), where /is the value of the 
llr field and P is the value of the IPr field; ris an element of {U, 0, 1, 2, 3}. Likewise, the number of EIB clock 
cycles between subsequent generation of IOIF1 Out tokens for RAG ris (9 + /) x 2(P+2) where lis the value 
of the Olr field and P is the value of the OPr field; ris an element of {U, 0, 1, 2, 3}. 


Eight plus the value of an Ilr is loaded into RAG rlOlF1 In rate decrementer when the RAG rlOIF1 In rate 
decrementer expires. When a rate decrementer is zero and is to be decremented again, the rate decrementer 
expires. Not only does the rate decrementer have to be zero, but it also must be decremented again, at which 
time it is loaded again based on the allocation. The RAG rlOIF1 In rate decrementer is decremented one out 
of 2‘*2) EIB clocks, where P is the value of the IPr field. The RAG rlOIF1 In rate decrementer is used to 
generate tokens if enabled by the corresponding TKM_CR Register RAG r Rate Counters Enable bit. The 
RAG rlOIF1 Out rate decrementer functions in a similar manner using the Olr and OPr fields. 


Valid values for the prescaler fields are 0 to 7. 
































Register Short Name TKM_IOIF1_AR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50AFD8’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit TKM 

o 

o 

2 

B 

£ IPU IIU IPO l0 IP1 WW IP2 112 IP3 lI3 


t4 y vy vy vy vy vy Vy vy Vy vy 4 


[o 1/2 3 4/5 6 7/8 9 1011 12 13/14 15 16/17 18 19/20 21 22|23 24 25|26 27 28/29 30 31| 






































Reserved 


OPU OlU OPO olo OP1 Ol1 OP2 ol2 OP3 Ol3 


vv y 4 4 4 y vv vv 4 4 vv vv vv 4 4 4 
32 33/34 35 36/37 38 39|40 41 42/43 44 45|46 47 48/49 50 51/52 53 54/55 56 57|58 59 60/61 62 63 













































































Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
2:4 IPU IOIF1 In Prescaler for RAG U, where RAG U IOIF1 In Rate Decrementer is decremented every one 
i out of 2!PY EIB clock cycles 
5:7 HU Interval for RAG U, where (IIU + 8) is loaded into the RAG U IOIF1 In Rate Decrementer when RAG 
` U IOIF1 In Rate Decrementer would be decremented below zero. 
8:10 IPO IOIF1 In Prescaler for RAG 0, where RAG 0 IOIF1 In Rate Decrementer is decremented every one 
i out of 2!'P° EIB clock cycles 
11:13 ilo Interval for RAG 0, where (II0 + 8) is loaded into the RAG 0 IOIF1 In Rate Decrementer when RAG 
` 0 IOIF1 In Rate Decrementer would be decremented below zero. 
Token Manager (TKM) MMIO Registers Version 1.5 


Page 212 of 357 April 2, 2007 


SONY 


SONY 


SAMMI © 


Registers 


Cell Broadband Engine 







































































Bits Field Name Description 

14:16 IP4 IOIF1 In Prescaler for RAG 1, where RAG 1 IOIF1 In Rate Decrementer is decremented every one 
i out of 2!P1 EIB clock cycles 

17:19 1 Interval for RAG 1, where (II1 + 8) is loaded into the RAG 1 IOIF1 In Rate Decrementer when RAG 
i 1 IOIF1 In Rate Decrementer would be decremented below zero. 

20:22 IP2 IOIF1 In Prescaler for RAG 2, where RAG 2 IOIF1 In Rate Decrementer is decremented every one 
, out of 2!P2 EIB clock cycles 

23:25 12 Interval for RAG 2, where (II2 + 8) is loaded into the RAG 2 IOIF1 In Rate Decrementer when RAG 
. 2 IOIF1 In Rate Decrementer would be decremented below zero. 

26:28 IP3 IOIF1 In Prescaler for RAG 3, where RAG 3 IOIF1 In Rate Decrementer is decremented every one 
: out of 2IP3 EIB clock cycles 

29:31 113 Interval for RAG 3, where (II3 + 8) is loaded into the RAG 3 IOIF1 In Rate Decrementer when RAG 
i 3 IOIF1 In Rate Decrementer would be decremented below zero. 

32:33 Reserved Bits are not implemented; all bits read back zero. 

34:36 OPU IOIF1 Out Prescaler for RAG U, where RAG U IOIF1 Out Rate Decrementer is decremented every 
; one out of 2°P" EIB clock cycles 

37:39 Olu Interval for RAG U, where (OIU + 8) is loaded into the RAG U IOIF1 Out Rate Decrementer when 
i RAG U IOIF1 Out Rate Decrementer would be decremented below zero. 

40:42 OPO IOIF1 Out Prescaler for RAG 0, where RAG 0 IOIF1 Out Rate Decrementer is decremented every 1 
out of 29P° EIB clock cycles 

43:45 olo Interval for RAG 0, where (OI0 + 8) is loaded into the RAG 0 IOIF1 Out Rate Decrementer when 
` RAG 0 IOIF1 Out Rate Decrementer would be decremented below zero. 

46:48 OP1 IOIF1 Out Prescaler for RAG 1, where RAG 1 IOIF1 Out Rate Decrementer is decremented every 1 
out of 20P1 EIB clock cycles 

49:51 ol Interval for RAG 1, where (O11 + 8) is loaded into the RAG 1 IOIF1 Out Rate Decrementer when 
i RAG 1 IOIF1 Out Rate Decrementer would be decremented below zero. 

52:54 OP2 IOIF1 Out Prescaler for RAG 2, where RAG 2 IOIF1 Out Rate Decrementer is decremented every 1 
' out of 20P2 EIB clock cycles 

55:57 ole Interval for RAG 2, where (Ol2 + 8) is loaded into the RAG 2 IOIF1 Out Rate Decrementer when 
' RAG 2 IOIF1 Out Rate Decrementer would be decremented below zero. 

58:60 OP3 IOIF1 Out Prescaler for RAG 3, where RAG 3 IOIF1 Out Rate Decrementer is decremented every 1 
i out of 2°P8 EIB clock cycles 

61:63 013 Interval for RAG 3, where (OI3 + 8) is loaded into the RAG 3 IOIF1 Out Rate Decrementer when 
` RAG 3 IOIF1 Out Rate Decrementer would be decremented below zero. 
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8.2.4 TKM Priority Register (TKM_PR) 


This register defines which RAGs are granted unused tokens and unallocated tokens. If enabled by 
TKM_CR[UE], a RAG’s unused token is made available to another RAG with an outstanding request. 
The RAG with the outstanding request is chosen based on priority values in this register. If enabled by 
TKM_CR[Ri] where i= U, the Unallocated token is made available to a RAG with an outstanding request. 
The RAG with the outstanding request is chosen based on priority values in this register. 


















































































































































Register Short Name TKM_PR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50AFEO’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit TKM 
Reserved RUEr 
> 
M voy 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29/30 31 
se) is) ise) is) N 
a nN N Z Z 
RUEr RUOVr = RUIVr Zz ROEr RO01Vr & RiEr RiOVr & R2Er R20Vr & R3Er R30Vr & 
< 
4 y an a y an a a y t? 44y t? 44y 4 4 4y 
32 33/34 35 36/37 38/39/40 41 42|43 44|45|46 47 48|49 50|51|52 53 54|55 56/57/58 59 60/61 62/63 
Bits Field Name Description 
0:29 Reserved Bits are not implemented; all bits read back zero. 
30:33 RUEr RAG U tokens enable for RAG rto obtain these tokens, where r= 0 to 3 corresponding to bits 
; [30:33], respectively. 
RAG U tokens: Priority of RAG 0 versus RAG r, where r= 1 to 3 corresponding to bits [34:36], 
f respectively. For each bit: 
one ONT 0 RAG 0 has lower priority than RAG rfor RAG U tokens 
1 RAG 0 has higher priority than RAG rfor RAG U tokens 
RAG U tokens: Priority of RAG 1 versus RAG r, where r= 2 to 3 corresponding to bits [37:38], 
. RLV respectively. For each bit: 
ree UNE 0 RAG 1 has lower priority than RAG rfor RAG U tokens 
1 RAG 1 has higher priority than RAG rfor RAG U tokens 
RAG U tokens: Priority of RAG 2 versus RAG 3 
39 RU2V3 0 RAG 2 has lower priority than RAG 3 for RAG U tokens 
1 RAG 2 has higher priority than RAG 3 for RAG U tokens 
40:42 ROEr RAG 0 unused tokens: enable for RAG rto obtain these tokens, where r= 1 to 3 corresponding to 
i bits [40:42], respectively. 
RAG 0 tokens: Priority of RAG 1 versus RAG r, where r= 2 to 3 corresponding to bits [43:44], 
f ROV respectively. For each bit: 
are RINE 0 RAG 1 has lower priority than RAG rfor RAG 0 unused tokens 
1 RAG 1 has higher priority than RAG rfor RAG 0 unused tokens 
RAG 0 tokens: Priority of RAG 2 versus RAG 3 
45 RO02V3 0 RAG 2 has lower priority than RAG 3 for RAG 0 unused tokens 
1 RAG 2 has higher priority than RAG 3 for RAG 0 unused tokens 
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Bits Field Name Description 








RAG 1 unused tokens: enable for RAG rto obtain these tokens, where r= 0, 2, or 3, corresponding 


46:48 RIEr to bits [46:48], respectively. 





RAG 1 tokens: Priority of RAG 0 versus RAG r, where r= 2 to 3 corresponding to bits [49:50], 
respectively. For each bit: 

0 RAG 0 has lower priority than RAG rfor RAG 1 unused tokens 

1 RAG 0 has higher priority than RAG rfor RAG 1 unused tokens 


49:50 R10Vr 





RAG 1 tokens: Priority of RAG 2 versus RAG 3 
51 R12V3 0 RAG 2 has lower priority than RAG 3 for RAG 1 unused tokens 
1 RAG 2 has higher priority than RAG 3 for RAG 1 unused tokens 





RAG 2 unused tokens: enable for RAG r to obtain these tokens, where r= 0, 1, or 3, corresponding 


52:54 R2Er to bits [52:54], respectively. 





RAG 2 tokens: Priority of RAG 0 versus RAG r, where r= 1 or 3 corresponding to bits [55:56], 
respectively. For each bit: 


0 RAG 0 has lower priority than RAG rfor RAG 2 unused tokens 
1 RAG 0 has higher priority than RAG rfor RAG 2 unused tokens 


RAG 2 tokens: Priority of RAG 1 versus RAG 3 
57 R21V3 0 RAG 1 has lower priority than RAG 3 for RAG 2 unused tokens 
1 RAG 1 has higher priority than RAG 3 for RAG 2 unused tokens 


55:56 R20Vr 








RAG 3 unused tokens: enable for RAG rto obtain these tokens, where r= 0, 1, or 2, corresponding 


98:00 R3Er to bits [58:60], respectively. 





RAG 3 tokens: Priority of RAG 0 versus RAG r, where r= 1 to 2 corresponding to bits [61:62], 
respectively. For each bit: 


0 RAG 0 has lower priority than RAG rfor RAG 3 unused tokens 
1 RAG 0 has higher priority than RAG rfor RAG 3 unused tokens 


61:62 R30Vr 





RAG 3 tokens: Priority of RAG 1 versus RAG 2 
63 R31V2 0 RAG 1 has lower priority than RAG 2 for RAG 3 unused tokens 
1 RAG 1 has higher priority than RAG 2 for RAG 3 unused tokens 

















There are two types of fields in this register. 
e RiEj enable field: 


— If i= U: RiEj indicates whether RAG j is enabled to obtain RAG U (Unallocated) tokens. If RiEj = 1, 
RAG j is enabled to obtain the RAG U tokens; otherwise, it is disabled. 


— For i= 0 to 3: RiEj indicates whether RAG j is enabled to obtain RAG i unused tokens. If RiEj = 1, 
RAG j is enabled to obtain the RAG i unused tokens; otherwise, it is disabled. 


e RijVk priority field: This field is only used if RiEj = 1 and RiEk = 1. 


— If ¿= U: RijVk indicates whether RAG j has higher priority than RAG k in obtaining RAG U (Unallo- 
cated) tokens. If RijVk = 1, RAG j has higher priority than RAG k in obtaining RAG U tokens; other- 
wise, RAG j has lower priority than RAG k in obtaining RAG U tokens. 


— For i= 0 to 3: RijVk indicates whether RAG j has higher priority than RAG k in obtaining RAG i 
unused tokens. If RijVk = 1, RAG j has higher priority than RAG k in obtaining RAG i unused tokens; 
otherwise, RAG j has lower priority than RAG k in obtaining RAG i unused tokens. 


If a circular priority order for RAG i unused or unallocated tokens is established such that some RAG n has 
higher priority than RAG m and RAG m has higher priority than RAG n and RiEn = 1 and RiEm = 1, which 
RAG is given the token is undefined. For example, if RAGs 0 — 2 are enabled for RAG 3 unused tokens, 
RAG 0 has higher priority than RAG 1, RAG 1 has higher priority than RAG 2, and RAG 0 has lower priority 
than RAG 2, which RAG is given RAG 3 unused token is undefined. 


Version 1.5 Token Manager (TKM) MMIO Registers 
April 2, 2007 Page 215 of 357 


SONY 


Registers “> SONY 


SOMAS w 


Cell Broadband Engine 


The following example demonstrates assigning values for RAG 1 unused tokens: 


R1EO = 1; R1E2 = 1; R1E3 = 1 (all other RAGs are enabled to obtain RAG 1 unused tokens) 
R102 = 1 (RAG 0 has higher priority than 2) 
R103 = 0 (RAG 0 has lower priority than 3) 
R123 = 0 (RAG 2 has lower priority than 3) 


The priority order from highest to lowest is 3, 0, 2. If a RAG 1 token becomes an unused token, and if all other 
RAGs have an outstanding request for the token, RAG 3 is given the token since it has higher priority than the 
other two RAGs. 
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8.2.5 TKM Interrupt Status Register (TKM_IS) 


The TKM_IS Register indicates which TKM events caused an external interrupt condition. If feedback for a 
managed resource indicates that the command queue is full, the corresponding TKM_IS Register bit is set. 
When a TKM_IS Register bit is set to ‘1’ and the corresponding interrupt is enabled, an exception signal from 
the TKM to the IIC is active. When this signal is active, the IIC sets the TKM exception bit in the IIC_IS 
register to ‘1’. 


Reads of the TKM_IS Register are nondestructive. Once a TKM_IS Register bit is set to ‘1’, it remains set 
until software resets the bit. To reset the TKM_IS Register bit, software must write a binary one to the corre- 
sponding bit. 











































































































Register Short Name TKM_IS Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50AFE8’ Memory Map Area MIC and TKM 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit TKM 
Reserved 
4 > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved M 10 O0 l1 O1 
i Vevey 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59/60) 61 | 62|63 
Bits Field Name Description 
0:58 Reserved Bits are not implemented; all bits read back zero. 
59 M MIC feedback 
Set to ‘1’ if MIC feedback indicates that the command queue is full. 
60 lo In IOIFO feedback 
Set to ‘1’ if lOIFO In feedback indicates that the command queue is full. 
61 00 Out IOIFO feedback 
Set to ‘1’ if lOIFO Out feedback indicates that the command queue is full. 
62 H In IOIF1 feedback 
Set to ‘1’ if IOIF1 In feedback indicates that the command queue is full. 
63 o1 Out IOIF1 feedback 
Set to ‘1’ if IOIF1 Out feedback indicates that the command queue is full. 
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This register controls trace and performance monitor functions in the token manager. 











BE_MMIO_Base 


Register Short Name TKM_PMCR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘50AFFO’ Memory Map Area MIC and TKM 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 


































































































Specification Type Implementation-specific register | Unit TKM 
Cc 
a 
z 
< 
a 
Reserved ®  Group_A_Select Group_B_Select Group_C_Select Group_D_Select 
M $ 4 y vv vv vv 4 
0O 1 2 3 4 5 6 7 8 9 10/11/12 13 14 15 16|17 18 19 20 21/22 23 24 25 26|27 28 29 30 31 
x 
~ o =) 
g S a = 
| 2 
3 5G 6 
© a! oa a! 
F, 5 5 8, 
bE ` a © D 
Reserved = WT_Trace_Enable Trigger_Select Æ E = 
M t44} 4 y t 44y 4 
32 33 34 35/36 37/38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53|54 55 56 57/58/59/60 61 62 63 
Bits Field Name Description 
0:10 Reserved Bits are not implemented; all bits read back zero. 
TKM performance monitor latches enable. Disable to save power when not in use. 
11 Perf_Act_En (0) Disabled 
1 Enabled 
Performance monitor group A select for debug bus bits [0:15]. Values not listed are invalid. 
00000 Disable Group A 
10000 Select Signal Group AO 
12:16 Group_A_Select 01000 Select Signal Group A1 
00100 Select Signal Group A2 
00010 Select Signal Group A3 
00001 Select Signal Group A4 
Performance monitor group B select for debug bus bits [16:31]. Values not listed are invalid. 
00000 Disable Group B 
10000 Select Signal Group BO 
17:21 Group_B_Select 01000 Select Signal Group B1 
00100 Select Signal Group B2 
00010 Select Signal Group B3 
00001 Select Signal Group B4 
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Bits Field Name 


Description 








22:26 Group_C_Select 


Performance monitor group C select for debug bus bits [64:79]. Values not listed are invalid. 
00000 Disable Group C 

10000 Select Signal Group CO 

01000 Select Signal Group C1 

00100 Select Signal Group C2 

00010 Select Signal Group C3 

00001 Select Signal Group C4 





27:31 Group_D_ Select 


Performance monitor group D select for debug bus bits [80:95]. Values not listed are invalid. 
00000 Disable Group D 

10000 Select Signal Group DO 

01000 Select Signal Group D1 

00100 Select Signal Group D2 

00010 Select Signal Group D3 

00001 Select Signal Group D4 





32:35 Reserved 


Bits are not implemented; all bits read back zero. 





36:37 WT_Trace_Act 


Enables for performance monitor latches in the EIB that are used for token manager performance 
monitor, trace, triggers, and events. Disable to save power when not in use. 


00 Disabled 
01 Enabled 





38:53 WT_Trace_Enable 


Trace Bus byte enables, which must be set to ‘1’ to propagate the Trace Bus byte from other units 
as well as from token manager. For n = 0 to 15, TKM_PMCR{[38 + n] corresponds to Trace Bus byte 
n. 

x‘0000’ Disabled 

x‘0001’ Enabled 





54:57 Trigger_Select 


Select for token request and grant on Trigger Bus. Values not listed are invalid. 
0000 IOCO token request and grant 
0001 IOC1 token request and grant 
0010 SPE2 token request and grant 
0011 SPE token request and grant 
0100 SPE4 token request and grant 
0101 SPE5 token request and grant 
0110 SPE6 token request and grant 
0111 SPE7 token request and grant 
1000 SPEO token request and grant 
1001 SPE1 token request and grant 
1010 PPE token request and grant 





58 Trigger_En_Gnt 


Enable Token Grant on Trigger Bus. 
0 Disabled 
1 Enabled 





59 Trigger_En_Req 











Enable token request on Trigger Bus. 
0 Disabled 
1 Enabled 
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Bits Field Name Description 
Selects for request or grant triggers on Trigger Bus bits. 
Trigger_Out_Mux[0:1] selects position of request trigger when enabled. 
00 Trigger Bus bit [0] 
01 Trigger Bus bit [1] 
10 Trigger Bus bit [2] 
11 Trigger Bus bit [3] 

60:63 Trigger_Out_Mux —_ Trigger_Out_Mux[2:3] selects position of grant trigger when enabled. 
00 Trigger Bus bit [0] 
01 Trigger Bus bit [1] 
10 Trigger Bus bit [2] 
11 Trigger Bus bit [3] 
Setting Trigger_Out_Mux[0:1] = Trigger_Out_Mux[2:3] when both request and grant triggers are 
enabled will OR the triggers into the same bit position. 
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9. CBE Distribution (BED) of I/O MMIO Registers 


This section describes the BED memory-mapped I/O (MMIO) registers. Table 9-1 shows the BED MMIO 
memory map and lists the BED registers. Though these registers are part of the BED function, they tie into 
the BIC BCIk MMIO ring on slice 1. All BED MMIO registers are part of the Slice 1 BCIk MMIO ring. For the 
complete CBE MMIO memory map, see Section 1 Cell Broadband Engine Memory-Mapped I/O Registers on 
page 19. 


The following notes apply to the register bit definitions: 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Table 9-1. BED MMIO Memory Map 





Hexadecimal A 
Offset Register Name and (Short Name) Width Read/ Additional Information 
‘ , (Bits) | Write 

(x513 nnn’) 








x‘600’ — Link 0 | BED Link n [n = 0, 1] Transmit Byte Training Control Registers 64 R/W 


x‘608’ — Link 1 (BED_Lnk0_TransBytTrngCntl, BED_Lnk1_TransBytTrngCntl) SecHon:3:1 on page-222 





x‘610’ — Link 0 | BED Link n [n = 0, 1] Receive Byte Training Control Registers 64 R/W 


x‘618'— Link 1 (BED_RecBytTrngCntl_Lnk0, BED_RecBytTrngCnt!_Lnk1) Sgchon #2 On page:223 


x‘620’ BED RRAC Register Control Register (BED_RRAC_RegCntl) 64 R/W Section 9.3 on page 225 





BED RRAC Register Read Data Register 64 R/W 


(BED_RRAC_RegRdDat) Section 9.4 on page 226 


x‘628' 
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9.1 BED Link n [n = 0, 1] Transmit Byte Training Control Registers 
(BED_Lnk0_TransBytTrngCntl, BED_Lnk1_TransBytTrngCnitl) 


This register is used by software to enable the transmit first-in first-outs (FIFOs) and to send training patterns. 
The typical value after training is done is x‘8200000’. 











Register Short Name BED_Lnk0_TransBytTrngCnitl Privilege Type Privilege 1 
BED_Lnk1_TransBytTrngCnitl 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘513600’ Memory Map Area BIC 1 BCIk 

BE_MMIO_Base x'513608’ 





Value at Initial POR 


All bits set to zero 


Value During POR Set By Scan initialization during POR 





Specification Type 





BED_Trace_Control 


Rsvd_| 


4 
rc 





Implementation-specific register | Unit BED 











Reserved 








o|< TFIFO 
=|  BTraining 


ne 
wle 
Ale, 
a) < 
Dle 
sje 




















> 
M 
8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Reserved 





4 





32 33 


34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name 


Description 








0 TFIFO 


Enable transmit FIFO 


Set by software after bit levelization is complete in the FlexlO. Setting this bit enables transmission 
of idle characters on all bytes of the link. Resetting (clearing) this bit resets the transmit FIFO. Do 
not set this bit until FlexlO initialization is complete, and the clocks from the FlexlO are stable. 





1 BTraining 


Enable byte training 


Set by software after bit levelization is complete in the FlexlO and the Enable Transmit FIFO bit is 
set. Setting this bit enables transmission of the hardware byte-training sequence. Resetting (clear- 
ing) this bit stops transmission of the training sequence. 





2:3 Rsvd_l 


Reserved. Latch bits are implemented; value read is the value written. 





4:5 BED_Trace_Control 


This field is only implemented in BED_Lnk0_TransBytTrngCnil. 


In BED_LnkO_TransBytTrngCnil, bits 4 and 5 are the BED Trace Control. Set either or both bits to 
‘1’ to enable BED trace data. 


In BED_Lnk1_TransBytTrngCnil, bits 4 and 5 are reserved. Latch bits are implemented; value read 
is the value written. 





6:7 TL 


Transmit latency. The default is ‘00’. For the CBE, this field must be set to ‘10’ (2). Software should 
only modify this field before the transmit FIFO is enabled. 

This field is intended for use during debug and characterization and should only be changed with 
values provided by the hardware designers. Setting this field increases the latency for data trans- 
mitted on the link. In hardware, it controls the separation of the write and read pointers for the trans- 
mit FIFO. 











8:63 Reserved 


Bits are not implemented; all bits read back zero. 
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9.2 BED Link n [n = 0, 1] Receive Byte Training Control Registers 
(BED_RecBytTrngCntl_Lnk0, BED_RecBytTrngCntlI_Lnk1) 


This register is used by software to enable byte training on the receive path. The typical value after training is 
done is x‘66000000’. 






































Register Short Name BED_RecBytTrngCntl_LnkO Privilege Type Privilege 1 
BED_RecBytTrngCntl_Lnk1 

Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘513610' Memory Map Area BIC 1 BCIk 
BE_MMIO_Base x‘513618" 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit BED 

s3 5 

Frese 9 
D 9 z E S 
£ > 0 = wo 
= SEs | 
cai §& B s 
e E a Reserved 

> 

Yvyvy Vv vy 
0;/1);2;3/;/4)5 6 7/8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 


























Reserved 


eee eee 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 











Bits Field Name Description 





Enable byte training 

Set by software after the Enable Byte Training bit is set at the source (TX) end of the link. This bit 
initiates the hardware hunt for the correct training pattern. It must be reset after training is complete, 
and before starting normal traffic on the link. 


0 BTraining 





Byte shift learning complete 

1 BSLC Set by hardware after the correct byte alignment has been found on all bytes of the link. On a 2:1 
FlexlO no byte shifting is required, therefore this bit is set immediately after the Start Byte Training 
bit is set. This is a status bit that indicates byte training progress. 





Byte levelization complete 


2 Byt_Lev_Comp Set by hardware after the receiving FIFOs are all adjusted to align all bytes within the link. Software 
polls this bit to detect completion of byte training. 





Alignment failed 


Set by hardware to indicate a failure during byte training. If this bit is detected as set during byte 
training, software must clear the RX and TX training registers, and restart the training sequence. 

3 Alignment_Failed Set to ‘1’ if nine BCLK cycles have elapsed since the time an 8-bit physical link received x‘EE00’ 

E without receiving x‘EE00’ on all 8-bit links used for one device. Software only modifies this bit when 
byte training is not active. For example, software modifies this bit when the [Byte_Training] bit in this 
register is already set to ‘0’, or if the [Byte_Training] bit had been set to ‘1’ and the hardware has set 
either the [Byt_Lev_Comp] or [Alignment_Failed] bit to ‘1’. 
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Bits Field Name Description 
Enable Untrained Pass Data 
Set this bit to allow the receive FIFOs to pass data through without being trained. It should only be 
set for debug purposes. 
4 PData_Untrained Note: Complete the following steps to enable the bypass mode. 
1. Set this register to x‘8E000000’. 
2. Wait 16 cycles. 
3. Set bit [Byte_Training] to ‘0’. Do not modify the other bits (x‘6E000000’). 
Data skip count 
This field is set by software. Hardware uses it to control the number of FIFO entries skipped before 
starting to read the FIFO when byte levelization completes. FIFO entries must be skipped in some 
designs due to the number of cycles of delay lost to communicate alignment between different 8-bit 
5:7 Data_Skip_Count physical links. The FIFO read pointer must start at an offset based on this number of bclk cycles in 
the Cell Broadband Engine. The design implementation dictates the value required for this field. 
000 Default 
110 For the Cell Broadband Engine (CBE), this field must be set to ‘110’ (6). Software should 
only modify this field before byte training is performed. 
8:63 Reserved Bits are not implemented; all bits read back zero. 
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9.3 BED RRAC Register Control Register (BED_RRAC_RegCntl) 


This register is used by software to access FlexlO register space. 






























































Register Short Name BED_RRAC_RegCntl Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘513620’ Memory Map Area BIC 1 BCIk 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit BED 
o 
3S EE 
a E 9 
0 0O O 
® © ® 
co © 
| 
e22 
ee ee a RRAC_Reg_Add_RW RRAC_Reg_Wrt_Data 
t444 Vy 4 
0l112|3]4 5 6 7 8 9 10 11 12 13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
4 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name Description 








Enable FlexlO Register Reset 





0 RRAC_Reg_Reset |Set by hardware during register reset and cleared after the reset sequence completes. Software 
can set this bit to force a FlexlO register reset sequence to start. 
FlexlO register command 

1 RRAC_Reg_Cmd 0 Read 


1 Write 





FlexlO register command error. A write to the FlexlO register control register was attempted while 
2 RRAC_Reg_Cmd_Err | FlexlO register command in progress. The default is 0. Hardware sets this to 1 if a write to a FlexlO 
register happens while there is already a FlexlO register command in progress. 





3 Rsvd_l Reserved. Behavior is unpredictable. 





FlexlO register address to be written or read 
: Reg_Add_RW 
41b RRAC_Reg_Add_ Bits[4:15] correspond to FlexlO Reg_Addr[0:11] 





FlexlO register write data 


: RAC_Reg_Wrt_Dat 
16:31 RRAC_Reg Wrt_Data Bits[16:31] correspond to FlexlO Reg_Wr_Data[0:15] 




















32:63 Reserved Bits are not implemented; all bits read back zero. 
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9.4 BED RRAC Register Read Data Register (BED_RRAC_RegRdDat) 











BE_MMIO_Base 


Register Short Name BED_RRAC_RegRdDat Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘513628’ Memory Map Area BIC 1 BCIk 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 





















































Specification Type Implementation-specific register | Unit BED 
RRAC_Reg_Rd_Data Reserved 
> 
M 4 J 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
i 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 

Bits Field Name Description 
FlexlO register read data 
These bits correspond to FlexlO Reg_Rd_Data[0:15]. The default is x‘0000’. 

0:15 | RRAC_Reg_Rd_Data When software reads this register, the BED issues the read to the FlexlO register address specified 
by the register control register. The BED returns the FlexlO register value when the read sequence 
is complete. 

16:63 Reserved Bits are not implemented; all bits read back zero. 

















CBE Distribution (BED) of I/O MMIO Registers 


Page 226 of 357 


Version 1.5 
April 2, 2007 


SONY 


SONY “> Registers 


Cell Broadband Engine 


10. Element Interconnect Bus (EIB) MMIO Registers 


This section describes the EIB IOC memory-mapped I/O (MMIO) registers. Table 10-1 shows the EIB MMIO 
memory map and lists the EIB registers. The EIB register space starts at x‘511800’ and ends at x‘511BFF’. 
Offsets are from the start of the EIB register space. For the complete CBE MMIO memory map, see Section 1 
Cell Broadband Engine Memory-Mapped I/O Registers on page 19. 
The following notes apply to the register bit definitions: 

e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the POR sequence. 


Table 10-1. EIB MMIO Memory Map 















































Hexadecimal 
Seo be Register Name and (Short Name) Ht Fan Additional Information 
(x511nnn) 

x‘800’ EIB ACO Control Register (EIB_ACO_CTL) 64 R/W | Section 10.1 on page 228 
x‘808’ Reserved 
x‘810’ EIB Interrupt Register (EIB_Int) 64 | RW Section 10.2 on page 230 
x‘840’ EIB Local Base Address Register 0 (EIB_LBARO) 64 R/W | Section 10.3 on page 231 
x‘848’ EELA Mao Aadress Maoh Registerg 64 R/W | Section 10.4 on page 232 
x‘850' EIB Local Base Address Register 1 (EIB_LBAR1) 64 R/W Section 10.4.1 on page 233 
x858’ EA IEA MAD Address Mask Registér:1 64 R/W | Section 10.4.2 on page 234 

x‘860’ — x‘868’ Reserved 
x‘870’ EIB AC/Darb Configuration Register (EIB_Cfg) 64 | R/W Section 10.4.3 on page 235 

x‘878’ — x‘BFF’ | Reserved 
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10.1 EIB ACO Control Register (EIB_ACO_CTL) 


This register is used to control several address concentrator 0 (ACO) functions. 





































































































Register Short Name EIB_ACO_CTL Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511800’ Memory Map Area EIB 
BE_MMIO_Base 
Value at Initial POR x‘88060000_00000000’ Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit EIB 
3 
O 
$ & : cs 2 & 
cs = a 2 o zs 8 =| 9 z 
<x Q < a 
5S 2 = Q £ £ £ £ wow £ J1 = Reserved 
> 
MARMAR 44 yy 
01/2 3/4 5/6|/71/8//9/10 11)12)13 14 15|16|17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Command Reflection Rate 
0 Disable 
0 CRR 1 Enables ACO to reflect commands to AC1 at the maximum rate of one command per cycle. 


ACO attempts to reflect certain types of commands every cycle when enabled (M = 0, 
TType = ‘nnn10’. In a multiCBE system, this bit should be set to the same value in all the 
CBE processors. (default value) 





Single Step Mode 
0 Disable 


1 SSM 1 Sets ACO into Single Step mode. In this mode, ACO reflects one command and waits for 
the snoop response to return before it reflects another command. 


Note: This bit is for debug use only. This bit has no effect if ACO is off chip. 


PAAM Window Control 
These bits set the PAAM window. 
00 2 cycles (default) 





2:3 PAAM_WC 01  3cycles 
10 4 cycles 
11 5 cycles 


This bit delays the invalidation of the CAM entry and may have minimal effect on the EIB that has 
ACO off chip (two-CBE configuration). 
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Bits 


Field Name 


Description 








4:5 


ACO_WBFD 


ACO Wait Buffer Flush Delay 


These bits control when ACO stops accepting new commands from AC1 and then flush the wait 
buffer before again accepting new commands from AC1. 


The purpose of these bits is to prevent a livelock. A livelock occurs when many EIB masters are 
making accesses to the same cache line and commands stored in the Wait Buffer cannot make for- 
ward progress in a reasonable amount of time. 


The hardware detects when wait buffer commands leave the wait buffer, hit the PAAM window, and 
reenter the wait buffer again. A wait buffer empty condition resets all active counters. 


00 Never flush the Wait Buffer. 

01 Flush after 16 commands have reentered the Wait Buffer. 

10 Flush after 64 commands have reentered the Wait Buffer. (default value) 
11 Flush after 256 commands have reentered the Wait Buffer. 





WBFO 


1 Flush immediately when not empty 


WBPF 


Wait Buffer Flush Override 
0 Normal operation 


Disable Wait Buffer Prefetch 
This field slows down the wait buffer fetch rate. 





WBSiall 


Disable Wait Buffer Stall 
This field allows new commands to mix with wait buffer commands. 





WBSO 


Disable Wait Buffer Shutoff Logic 
This field allows new commands to end up at the head of the wait queue. 





10:11 


LLDW 


Livelock Detection Window 


00 fewer than 16 M = 1 commands needed to refill the wait buffer since it was last full (default 
setting) 


01 <32 M = 1 commands to refill 
10 <64 M = 1 commands to refill 
11 <128 M = 1 commands to refill 





12 


Arb_LFSR 


ACO Arbitration control between internal and off-chip commands 


0 Randomize the selection of internal and off-chip commands using an 8-bit LFSR function. 
(default) 


1 Alternate between internal and off-chip commands. 





13:15 


LLA_OpMode 


LiveLock Avoidance Operating Mode 

000 Mixed mode, exit after 8K M = 1 commands. 

001 Mixed mode, exit after 64K M = 1 commands. 

010 Mixed mode, exit when LiveLock Interrupt bit is reset. 

011 Reflect and Retry mode (wait buffer disabled, LiveLock interrupt disabled). 

10x Wait Buffer mode (Current Pass1 operating mode, LiveLock interrupt disabled). 

110 Default. CBC mode with interrupt issued upon possible livelock detected. 

111 CBC mode with interrupt disabled. 

Reflect and Retry mode-Any command that gets a PAAM Hit during Reflect and Retry mode is 
reflected instead of going into the PAAM wait buffer as happens during normal operation; ACO then 
forces the Retry bit for said command to be active in the combined snoop response. 

Mixed mode-ACO runs normally with the PAAM wait buffer until a possible livelock is detected, then 
switches to Reflect and Retry mode. ACO exits Reflect and Retry mode when the programmed exit 
condition occurs. 

CBC mode-Cycle-By-Cycle mode. Run in Wait Buffer mode until the PAAM wait buffer fills up. At 
that point, rather than stall the command pipe like normal Wait Buffer mode would, switch to Reflect 
and Retry mode until a wait buffer entry frees up. Then return back to Wait Buffer mode. 





16 


LLD_Mask 


EIB Possible Livelock Detection Interrupt Mask 
0 Interrupt enabled. When EIB_Int[0] is set to ‘1’, an interrupt is sent to IIC_IS[59]. 


1 Default. Interrupt masked. Register bit EIB_Int[0] can still be set to ‘1’, but no interrupt is 
sent to IIC_IS[59]. 





17:63 








Reserved 








Bits are not implemented; all bits read back zero. 
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10.2 EIB Interrupt Register (EIB_Int) 


This register is used to log that a possible livelock condition has been detected on the EIB. 





Register Short Name 


EIB_Int 





BE_MMIO_Base 


Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511810’ Memory Map Area EIB 





Value at Initial POR 


All bits set to zero Value During POR Set By Scan initialization during POR 

































































Specification Type Implementation-specific register | Unit EIB 
ne} 
= 
nl 
J Spare Reserved 
vv Viv i 
0/1 2 3/4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
EIB Possible LiveLock Detection Indicator 
0 None detected 
1 A possible livelock condition (overuse of the previous adjacent address match (PAAM) 
waitbuffer) has been detected. Contact your IBM technical support representative for more 
0 LLD_Ind information about the EIB Possible Livelock Detection Interrupt. 
Note: An MMIO write that sets this bit to ‘1’ when it was previously ‘0’ causes IIC_IS[59] to be set, 
provided EIB_ACO_CTL[16] is ‘0’, and regardless of the state of EIB_ACO_CTL[13:15]. 
EIB_ACO_CTL[16] can be used to mask this interrupt. Additionally, the LLD_Ind bit only sends an 
interrupt when it transitions from ‘0’ to ‘1’. If it is not reset to ‘0’, it will not issue another interrupt. 
1:3 Share Spare Bits 
` P This field can be read from or written to without side effects. 
4:63 Reserved Bits are not implemented; all bits read back zero. 
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10.3 EIB Local Base Address Register 0 (EIB_LBARO) 
This register contains the base address of the primary noncoherent address range. This base address is 


used in conjunction with the EIB_LBAMRO register to determine whether a command address falls within 
noncoherent range 0. 


Read and write commands in this address range are considered to be local commands. Local commands 
have the M bit set to ‘0’ and are reflected back to bus masters after arbitration. 



































Register Short Name EIB_LBARO Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511840’ Memory Map Area EIB 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By Configuration ring 
Specification Type Implementation-specific register | Unit EIB 

LBARO Reserved 


0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
Reserved 














< 





4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 



































Bits Field Name Description 
0:21 LBARO Defines the primary noncoherent command address range. Bits [0:21] of this register correspond to 
i bits [22:43] of the real address used on the EIB. 
22:63 Reserved Bits are not implemented; all bits read back zero. 
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10.4 EIB Local Base Address Mask Register 0 (EIB_LBAMRO) 


This register is used to hold the mask (bit enables) for the primary noncoherent address range. This mask 
is used to specify which bits from the command address should be compared to the EIB_LBARO register to 
determine whether the command address falls within noncoherent range 0. 


Read and write commands in the noncoherent range are considered to be local commands. Local commands 
have the M bit set to ‘0’ and are reflected back to bus masters after arbitration. 


















































Register Short Name EIB_LBAMRO Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘'511848’ Memory Map Area EIB 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By Configuration ring 
Specification Type Implementation-specific register | Unit EIB 
LBAMRO Reserved 
4 1 y > 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
Reserved 


Ss  —soooosasasS>S i 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 



































Bits Field Name Description 
Local Base Address Mask Register 0 
21 LBAMR 
o 0 Mask for use with Local Base Address Register 0 
22:63 Reserved Bits are not implemented; all bits read back zero. 
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10.4.1 EIB Local Base Address Register 1 (EIB_LBAR1) 
This register contains the base address of the secondary noncoherent address range. This base address is 
used in conjunction with the EIB_LBAMR1 register to determine if a command address falls within nonco- 
herent range 1. 


Read and write commands in this address range are considered to be local commands. Local commands 
have the M bit set to ‘0’ and are reflected back to bus masters after arbitration. 
























































Register Short Name EIB_LBAR1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511850’ Memory Map Area EIB 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit EIB 
LBAR1 Reserved 
> 

M + y 

O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 

Reserved 
à 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name Description 








Local Base Address Register 1 


0:21 LBAR1 Defines secondary noncoherent command address range. Bits [0:21] of this register correspond to 
bits [22:43] of the Real Address used on the EIB. 

















22:63 Reserved Bits are not implemented; all bits read back zero. 
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10.4.2 EIB Local Base Address Mask Register 1 (EIB_LBAMR1) 


This register contains the mask (bit enables) for the secondary noncoherent address range. This mask is 
used to specify which bits from the command address should be compared to the EIB_LBAR1 register to 
determine if the command address falls within noncoherent range 1. 


Read and write commands in the noncoherent range are considered to be local commands. Local commands 
have the M bit set to ‘0’ and are reflected back to bus masters after arbitration. 





















































Register Short Name EIB_LBAMR1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x'511858’ Memory Map Area EIB 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit EIB 
LBAMR1 Reserved 
> 

v voy 

012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21)22 23 24 25 26 27 28 29 30 31 

Reserved 
i 4 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
































Bits Field Name Description 
Local Base Address Mask Register 1 
:21 LBAMR1 
9 Mask for use with Local Base Address Register 1 
22:63 Reserved Bits are not implemented; all bits read back zero. 
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10.4.3 EIB AC/Darb Configuration Register (EIB_Cfg) 


Use this register to control configuration options and control switches in the address concentrators and data 
arbiter. 






























































































































































Register Short Name EIB_Cfg Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘511870’ Memory Map Area EIB 
BE_MMIO_Base 
Value at Initial POR x‘00080000_00000000’ Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit EIB 
Hee SESS A a ts 
SS őő 
S0 S1 S2 S3 D0 D1 D2 D3 MP DBT S55 O96 6060000600006 06 Reserved 
> 
5 A 2 A 2 A A A A 2 2 A A A AA, 
07;/1/2)/3/;4/5)6)7)8)/9 10)11)12)13)14)15)16)17 | 18) 19) 20) 21 | 22|23)24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0 So Enable Single Thread Mode for Data Ring 0 
1 S1 Enable Single Thread Mode for Data Ring 1 
2 S2 Enable Single Thread Mode for Data Ring 2 
3 S3 Enable Single Thread Mode for Data Ring 3 
4 DO Disable Data Ring 0 
5 D1 Disable Data Ring 1 
6 D2 Disable Data Ring 2 
Disable Data Ring 3 
7 D3 Caution: A minimum of one even data ring and one odd data ring must be enabled at all times, or 
deadlock might occur. Illegal combinations for bits [4:7] (in hexadecimal) are: 5, 7, A, B, D, E, and F. 
MIC Priority 
8 MP 0 MIC always wins over any other unit 
1 Treat MIC as an equal 





Destination Busy Timeout 


These bits determine how long to wait before resetting a destbusy latch. 
(EIB livelock prevention) 




















9:10 DBT 00 12 - 23 cycles 
01 16 - 31 cycles 
10 32 - 63 cycles 
11 Never (EIB denial-of-service livelock possible) 
Noncoherent (NC) Range Switch 0 

11 NCRSO 0 Make local NC Range 0 local 
1 Make local NC Range 0 global 
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Bits Field Name Description 

Noncoherent (NC) Range Switch 1 
12 NCRS1 0 Make local NC Range 1 local 

1 Make local NC Range 1 global 
13 cswi3 Disable Credit Switch 13 

Turns off command credits to the bus masters for unit 0 (BIC), which locks them out of the EIB. 
14 cswi4 Disable Credit Switch 14 

Turns off command credits to the bus masters for unit 1 (SPE6), which locks them out of the EIB. 
15 CSw15 Disable Credit Switch 15 

Turns off command credits to the bus masters for unit 2 (SPE4), which locks them out of the EIB. 
16 CSwié Disable Credit Switch 16 

Turns off command credits to the bus masters for unit 3 (SPE2), which locks them out of the EIB. 
17 CSwi7 Disable Credit Switch 17 

Turns off command credits to the bus masters for unit 4 (SPEO), which locks them out of the EIB. 
18 CSw18 Disable Credit Switch 18 

Turns off command credits to the bus masters for unit 5 (PPU), which locks them out of the EIB. 
19 CSw19 Disable Credit Switch 19 

Turns off command credits to the bus masters for unit 7 (SPE1), which locks them out of the EIB. 
20 CSw20 Disable Credit Switch 20 

Turns off command credits to the bus masters for unit 8 (SPE3), which locks them out of the EIB. 
214 CSw21 Disable Credit Switch 21 

Turns off command credits to the bus masters for unit 9 (SPE5), which locks them out of the EIB. 
22 CSw22 Disable Credit Switch 22 

Turns off command credits to the bus masters for unit A (SPE7), which locks them out of the EIB. 
23 CSw23 Disable Credit Switch 23 

Turns off command credits to the bus masters for unit B (IOC), which locks them out of the EIB. 

24:63 Reserved Bits are not implemented; all bits read back zero. 
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11. Pervasive MMIO Registers 


This section describes the pervasive Performance Monitor, Power Management, and Thermal Management 
memory-mapped I/O (MMIO) registers. Table 11-1 shows the pervasive MMIO memory map and lists the 
pervasive registers. The pervasive MMIO Registers area starts at x‘509000’ and ends at x‘509FFF’. Offsets 
are from the start of the pervasive register space. For the complete CBE MMIO memory map, see Section 1 
Cell Broadband Engine Memory-Mapped I/O Registers on page 19. 


The following notes apply to the register bit definitions: 


e Multiple address offsets for a register indicate that there are multiple instances of this register. 


e The Privilege Type of all MMIO registers is recommended by the Cell Broadband Engine Architecture, but 
is not enforced in hardware. 


e The Value at Initial POR is the value that was initialized during the scan initialization or configuration ring 
part of the power-on reset (POR) sequence. 


11.1 Pervasive MMIO Memory Map 


Note: Within the (RAS) test control unit (TCU) shared memory space, the 32-bit registers are defined on 
even word addresses. This means that these 32-bit registers are defined on bits [0:31] of the MMIO double- 
word. 


Table 11-1. Pervasive Registers (Page 1 of 3) 











Hexadecimal 
BA _ Register Name and (Short Name) (eis) Pa Additional Information 
x‘509FFF’) 
Fault Isolation Registers 
x‘C00’ Global Fault Isolation Register (checkstop_fir) 32 R Section 11.2.1 on page 240 





Global Fault Isolation Register for Recoverable Errors 








x‘C08 (recoverable_fir) 32 R Section 11.2.2 on page 241 
i ; Global Fault Isolation Register For Special Attention And Machine ; 

x‘C10 Check (spec_att_mchk_fir) 32 R/R | Section A.11 on page 345 

x‘C18’ Global Fault Isolation Mode Register (fir_mode_reg) 32 R/W | Section A.11 on page 345 

x'C20° Global Fault Isolation Error Enable Mask Register 32 R/W Section A.11 on page 345 


(fir_enable_mask) 





x‘C28’ — x‘C30’ Reserved 





x‘C38’ SPE Available Partial Good Register (SPE_available) 32 R | Section 11.2.3 on page 242 





x‘C40’ — x‘C58’ ~~ Reserved 





x‘C80’ Serial Number (serial_number) 64 R | Section 11.2.4 on page 243 
x‘C88’ — x‘CB8’ | Reserved 

















Performance Monitor Registers shared with the TLA 











x‘008’ Group Control Register (group_control) 32 W ss Section 11.3.1 on page 244 
x‘0A8’ Debug Bus Control Register (debug_bus_control) 32 W Section 11.3.2 on page 245 
x108 Trace Buffer High Doubleword Register (0 to 63) 64 R | Section 11.3.3 on page 247 





(trace_buffer_high) 
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Table 11-1. Pervasive Registers (Page 2 of 3) 

















Hexadecimal 
Offset p Width | Read/ Ra i 
(x‘509000' — Register Name and (Short Name) (Bits) | Write Additional Information 
x‘509FFF’) 
x110 Trace Buffer Low Doubleword Register (64 to 127) 64 R | Section 11.3.4 on page 248 
(trace_buffer_low) 
x‘118’ Trace Address Register (trace_address) 64 R/W | Section 11.3.5 on page 249 
x‘120’ External Trace Timer Register (ext_tr_timer) 64 W ss Section 11.3.6 on page 250 





Performance Monitor Only Registers 





x‘400° Performance Monitor Status/Interrupt Mask Register (pm_status) 32 R/W | Section 11.4.1 on page 251 





x‘408’ Performance Monitor Control Register (pm_control) 32 W Section 11.4.2 on page 252 





x‘410’ Performance Monitor Interval Register (pm_interval) 32 R/W | Section 11.4.3 on page 255 





x‘418’ 





x‘420° 





Performance Monitor Counter Pairs Registers (pmM_N) 32 R/W | Section 11.4.4 on page 256 
x‘428’ 





x‘430’ 





x‘438’ Performance Monitor Start Stop Register (pm_start_stop) 32 W ss Section 11.4.5 on page 257 





x‘440’ 
x448 








x‘450 





x458 





Performance Monitor Counter Control Registers (pmN_control) 32 W Section 11.4.6 on page 259 
x‘460’ 





x468 





x‘470’ 





x‘478’ 





Power Management Control Registers 





























x‘880’ Power Management Control Register (PMCR) 64 R/W | Section 11.5.1 on page 261 
x‘888’ Power Management Status Register (PMSR) 64 R | Section 11.5.2 on page 263 
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Hexadecimal 
E E Register Name and (Short Name) ra tal Additional Information 
x‘509FFF’) 

Thermal Management MMIO Registers 
x'800" pele as Current Temperature Status Register 1 64 R | Section 11.6.1 on page 265 
x808 e Current Temperature Status Register 2 64 R | Section 11.6.2 on page 267 
x810 He aa Maximum Temperature Status Register 1 64 R | Section 11.6.3 on page 268 
x818 op Maximum Temperature Status Register 2 64 R | Section 11.6.4 on page 270 
x‘820’ Thermal Sensor Interrupt Temperature Register 1 (TS_ITR1) 64 R/W | Section 11.6.5 on page 271 
x‘828’ Thermal Sensor Interrupt Temperature Register 2 (TS_ITR2) 64 R/W | Section 11.6.6 on page 273 
x‘830’ Thermal Sensor Global Interrupt Temperature Register (TS_GITR) 64 R/W | Section 11.6.7 on page 274 
x‘838’ Thermal Sensor Interrupt Status Register (TS_ISR) 64 R/W | Section 11.6.8 on page 275 
x‘840’ Thermal Sensor Interrupt Mask Register (TS_IMR) 64 R/W | Section 11.6.9 on page 276 
x‘848’ Thermal Management Control Register 1 (TM_CR1) 64 R/W | Section 11.6.10 on page 278 
x‘850’ Thermal Management Control Register 2 (TM_CR2) 64 R/W | Section 11.6.11 on page 279 
x‘858’ Thermal Management System Interrupt Mask Register (TM_SIMR), 64 R/W | Section 11.6.12 on page 280 
x‘860’ Thermal Management Throttle Point Register (TM_TPR) 64 R/W | Section 11.6.13 on page 281 
x‘868’ Thermal Management Stop Time Register 1 (TM_STR1) 64 R/W | Section 11.6.14 on page 283 
x‘870’ Thermal Management Stop Time Register 2 (TM_STR2) 64 R/W | Section 11.6.15 on page 284 
x‘878’ Thermal Management Throttle Scale Register (TM_TSR) 64 R/W | Section 11.6.16 on page 285 

Time Base Registers 
x‘890’ Time Base Register (TBR) 64 R/W | Section 11.6.17 on page 286 
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11.2.1 Global Fault Isolation Register (checkstop_fir) 


SONY 


COMPUTER: 
SREMARMER © 


SONY 


After this checkstop_fir register is written, the bits cannot be cleared except by rebooting the chip. The 


checkstop_fir register collects all uncorrectable (clock stop) errors received from the local units. 











BE_MMIO_Base 


Register Short Name checkstop_fir Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 32 bits 
Hex Offset From x‘509C 00’ Memory Map Area Pervasive: RAS 





Value at Initial POR 


All bits set to zero Value During POR Set By 


Scan initialization during POR 











Specification Type 


Implementation-specific register Unit 








TCU 








Reserved 


c1 c2 c3 c4 c5 c6 c7 c8 c9 c10 c11 c12 c13 c14 c15 c16 c17 c18 


y tyst A 2 2 2 A 2 A 2 A 2 y 









































































































































0 1 2 3 4 5 6 7 8 9 10 11 12 13)14})15)16)17 | 18) 19) 20) 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 

Bits Field Name Description 
0:12 Reserved Bits are not implemented; all bits read back zero. 

13 Reserved Reserved. Software should ignore value read and write only zero. 

14 ci PowerPC Processor Element (PPE)-PowerPC Processor Unit (PPU) 

15 c2 Level 2 (L2) Cache 

16 c3 Bus Interface Unit (BIU) 

17 c4 Core Interface Unit (CIU) 

18 c5 Memory Interface Controller (MIC) 

19 c6 Bus Interface Controller (BIC), 1/O Command (IOC) 

20 c7 Synergistic Processor Element (SPE) 0 

21 c8 SPE 1 

22 c9 SPE 2 

23 c10 SPE 3 

24 c11 SPE 4 

25 c12 SPE 5 

26 c13 SPE 6 

27 c14 SPE 7 

28 c15 External Checkstop C4 pin 

29 c16 Checkstop on trigger 

30 c17 Any Local Recoverable Error Counter 

31 c18 Checkstop by “CBE is quiesced” 
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11.2.2 Global Fault Isolation Register for Recoverable Errors (recoverable_fir) 


The recoverable_fir register collects all correctable errors received from the local units. Recovery actions are 
executed by the units. This global register is updated by the local partitions. 


















































































































































Register Short Name recoverable_fir Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 32 bits 
Hex Offset From x‘509C08’ Memory Map Area Pervasive: RAS 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit TCU 
8 
P 
Reserved rO rt r2 r3 r4 r5 r6 r7 r8 r9 10 r11 r12 r13 £ 
M tts A A stss A A 2 2 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16) 17) 18) 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 
Bits Field Name Description 
0:16 Reserved Bits are not implemented; all bits read back zero. 
17 rO PPE-PPU 
18 ri L2 
19 r2 BIU 
20 r3 CIU 
21 r4 MIC 
22 r5 BIC, IOC 
23 r6 SPEO 
24 r7 SPE1 
25 r8 SPE2 
26 r9 SPE3 
27 r10 SPE4 
28 r11 SPE5 
29 r12 SPE6 
30 13 SPE7 
31 Reserved Reserved. Software should ignore value read and write only zero. 
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The SPE_available register bits are read from the pervasive section of the configuration ring at POR. This 
register specifies whether any SPEs are disabled on the CBE chip. 








































































































Register Short Name spe_available Privilege Type Privilege 1 
Access Type MMIO Read Only Width 32 bits 
Hex Offset From x‘509C38’ Memory Map Area Pervasive: RAS 
BE_MMIO_Base 
Value at Initial POR N/A Value During POR Set By Configuration ring 
Specification Type Implementation-specific register | Unit TCU 
Reserved sO si s2 s3 s4 s5 s6 s7 
4 tsss sss 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23|24 |25 |26 |27 | 28 | 29 | 30} 31 
Bits Field Name Description 
SPEO available, partial good 
24 s0 (0) SPU is disabled 
1 SPU is available 
SPE1 available, partial good 
25 s1 (0) SPU is disabled 
1 SPU is available 
SPE2 available, partial good 
26 s2 (0) SPU is disabled 
1 SPU is available 
SPE3 available, partial good 
27 s3 (0) SPU is disabled 
1 SPU is available 
SPE4 available, partial good 
28 s4 (0) SPU is disabled 
1 SPU is available 
SPE5 available, partial good 
29 s5 (0) SPU is disabled 
1 SPU is available 
SPE6 available, partial good 
30 s6 0 SPU is disabled 
1 SPU is available 
SPE7 available, partial good 
31 s7 0 SPU is disabled 
1 SPU is available 
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11.2.4 Serial Number (serial_number) 


This is a 48-bit serial number. 







































































Register Short Name serial_number Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509C 80" Memory Map Area Pervasive: RAS 
BE_MMIO_Base 
Value at Initial POR x‘0000SSSS_SSSSSSSS’ Value During POR Set By Configuration ring 
(S = s0_s47) 
Specification Type Implementation-specific register | Unit TCU 
Reserved s0_s47 
> 
4 vy 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
s0_s47 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:15 Reserved Bits are not implemented; all bits read back zero. 
16:63 s0_s47 48-bit customer ID 
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11.3 Performance Monitor Registers Shared with the Trace Logic Analyzer 


11.3.1 Group Control Register (group_control) 


Group 0 selects which debug bus word goes to the counter input multiplexer (mux) bits [0-31]. Group 1 
selects which debug bus word goes to the counter input multiplexer bits [32-63]. See the debug_bus_control 
register for determination of which units are connected to word 0 through word 3. 











BE_MMIO_Base 


Register Short Name group_control Privilege Type Privilege 1 
Access Type MMIO Write Only Width 32 bits 
Hex Offset From x‘509008’ Memory Map Area Pervasive: Trace Logic Analyzer 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 





Specification Type 








Implementation-specific register 





Unit 





PRV 








group_0O 
group_1 


Rsvd_l 


Reserved 





4 





ole 
=] 
ne 
w] < 
Ale, 











M 
8 9 10 11 12 13 14 15 


16 17 18 19 20 21 22 23 


24 25 26 27 28 29 30 31 








Bits Field Name 


Description 








0:1 group_0 


Counter input mux bits[0:31] 


monitor bus bits[0:31]. 
00 word 0 
01 word 1 
10 word 2 
11 word 3 


Select the island’s word (as determined by the debug_bus_control register) to feed the performance 





2:3 group_1 


Counter input mux bits[32:63] 


mance monitor bus bits[32:63]. 
00 word 0 
01 word 1 
10 word 2 
11 word 3 


Select the sel_data segment (as determined by the debug_bus_control register) to feed the perfor- 





4:7 Rsvd_l 


Used only by the Trace Logic Analyzer; all bits read back zero 





8:31 Reserved 











Bits are not implemented; all bits read back zero. 
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11.3.2 Debug Bus Control Register (debug_bus_control) 
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This register is shared with the TLA. This register selects which set of units can have their signals counted in 


the performance monitor. 











BE_MMIO_Base 


Register Short Name debug_bus_control Privilege Type Privilege 1 
Access Type MMIO Write Only Width 32 bits 
Hex Offset From x‘5090A8’ Memory Map Area Pervasive: Trace Logic Analyzer 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 























































































































Specification Type Implementation-specific register | Unit PRV 
ral a a a Si "I S ai 
5 8 3 È f f E & 
word_0 word_1 word_2 word.3 2 = = = 3 3 3 3 Reserved 
Sn 2 A A A A A A 4 
O 1/12 3/4 5]/6 7/8 9 |10 11/12 13/14 15|16 17/18 19/20 21/22 23)24 25 26 27 28 29 30 31 
Bits Field Name Description 
00 Full frequency PPU or MFC 
0:1 wordo 01 Full frequency SPU (word 0) 
10 Half frequency 
11 Reserved 
Ignored if word 0 = SPU 
00 Full frequency; PPU or MFC 
2:3 word_1 01 Reserved 
10 Half frequency 
11 Reserved 
00 Full frequency PPU or MFC 
45 word:2 01 Full frequency SPU (word 1) 
10 Half frequency 
11 Reserved 
Ignored if word 2 = SPU 
00 Full frequency; PPU or MFC 
6:7 word_3 01 Reserved 
10 Half frequency 
11 Reserved 
00 Full frequency PPU or MFC 
, ' 01 Full frequency SPU 
ae trigger_0 10 Half frequency 
11 Reserved 
00 Full frequency PPU or MFC 
: : 01 Full frequency SPU 
tO: trigger_1 10 Half frequency 
11 Reserved 
00 Full frequency PPU or MFC 
, , 01 Full frequency SPU 
tees trigger_2 10 Half frequency 
11 Reserved 
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Bits Field Name Description 
00 Full frequency PPU or MFC 
, : 01 Full frequency SPU 
pene trigger_3 10 Half frequency 
11 Reserved 
00 Full frequency PPU or MFC 
; 01 Full frequency SPU 
eae evento 10 Half frequency 
11 Reserved 
00 Full frequency PPC core or MFC 
; 01 Full frequency SPU 
ee eventi 10 Half frequency 
11 Reserved 
00 Full frequency PPC core or MFC 
; 01 Full frequency SPU 
aul event 10 Half frequency 
11 Reserved 
00 Full frequency PPC core or MFC 
22:23 avent4 01 Full frequency SPU 
10 Half frequency 
11 Reserved 
24:31 Reserved Bits are not implemented; all bits read back zero 
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11.3.3 Trace Buffer High Doubleword Register (0 to 63) (trace_buffer_high) 


This register is shared with the TLA. 











BE_MMIO_Base 


Register Short Name trace_buffer_high Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509108’ Memory Map Area Pervasive: Trace Logic Analyzer 





Value at Initial POR All bits set to zero 


Value During POR Set By Scan initialization during POR 





Specification Type Implementation-specific register 











Unit PRV 











trace_buffer_data_0_15 


trace_buffer_data_16_31 





M 4 


M 4 

































































O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15/16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
trace_buffer_data_32_47 trace_buffer_data_48_63 
M vv 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
: PMO when configured as 16-bit counters; 
0:15 trace_buffer_data_0_15 PMO[0:15] when configured as a 32-bit counter. 
16:31 trace_buffer_data_16_3 PM4 when configured as 16-bit counters; 
: 1 PMO[16:31] when configured as a 32-bit counter. 
32:47 trace_buffer_data_32_4 PM1 when configured as 16-bit counters; 
: 7 PM1[0:15] when configured as a 32-bit counter. 
48:63 trace_buffer_data_48_6 | PM5 when configured as 16-bit counters; 
: 3 PM1[16:31] when configured as a 32-bit counter. 
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11.3.4 Trace Buffer Low Doubleword Register (64 to 127) (trace_buffer_low) 


This register is shared with the TLA. The read address is incremented on a read of this register, so this 
register must be read with a 64-bit MMIO read. 





















































Register Short Name trace_buffer_low Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509110’ Memory Map Area Pervasive: Trace Logic Analyzer 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
trace_buffer_data_64_79 trace_buffer_data_80_95 
Y vy 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15/16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
trace_buffer_data_96_111 trace_buffer_data_112_127 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47/48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 












































Bits Field Name Description 

0:15 trace_buffer_data_64_7 | PM2 when configured as 16-bit counters; 
i 9 PM2[0:15] when configured as a 32-bit counter. 

16:31 trace_buffer_data_80_9 |PM6 when configured as 16-bit counters; 
i 5 PM2[16:31] when configured as a 32-bit counter. 

32:47 trace_buffer_data_96_1 | PM3 when configured as 16-bit counters; 
` 11 PM3[0:15] when configured as a 32-bit counter. 

48:63 trace_buffer_data_112_|PM7 when configured as 16-bit counters; 
i 127 PM3[16:31] when configured as a 32-bit counter. 

Pervasive MMIO Registers Version 1.5 


Page 248 of 357 April 2, 2007 


SONY 


SONY “> Registers 


SAMMI © 


Cell Broadband Engine 


11.3.5 Trace Address Register (trace_address) 
This register is shared with the TLA. 


The trace_address register must be written to zero before enabling the performance monitor in performance 
data trace modes. Since the performance-monitor logic controls the trace arrays as a hardware FIFO during 
operation, it is unnecessary and undesirable to write the trace address registers. When in the 
trace_buffer_overwrite mode, the write and read pointers wrap when the maximum count is reached. A read 
from the FIFO with no data in the FIFO returns invalid data and sets a trace buffer underflow interrupt condi- 
tion. See Section 11.4.1 Performance Monitor Status/Interrupt Mask Register (pm_status) on page 251. 














































































































Register Short Name trace_address Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509118’ Memory Map Area Pervasive: Trace Logic Analyzer 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
2 
a 
write_address read_address full 5 data_count 
M vy t4 4y 4 
012 3 4 5 6 7 8 9/10 11 12 13 14 15 16 17 18 19/20|21|/22 23 24 25 26 27 28 29 30 31 
Reserved 
M 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:9 write_address Address for trace array writing. 
10:19 read_address Address for trace array reading. 
20 full Trace array full (read only) 
21 empty Trace array empty (read only) 
22:31 data_count Count of trace array addresses containing valid data (read only) 
32:63 Reserved Bits are not implemented; all bits read back zero 
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11.3.6 External Trace Timer Register (ext_tr_timer) 


The external trace timer sets the upper limit for data to be transferred from the trace buffer. 





















































Register Short Name ext_tr_timer Privilege Type Privilege 1 
Access Type MMIO Write Only Width 64 bits 
Hex Offset From x‘509120’ Memory Map Area Pervasive: Trace Logic Analyzer 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
external_trace_timer Reserved 
> 

M + y 

012 3 4 5 6 7 8 9 10 11 12 13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 

Reserved 
< y 





32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 








Bits Field Name Description 





The external trace timer sets the upper limit for data to be transferred from the trace buffer. These 
16 bytes are burst over the auxiliary bus one byte per NCIk/2 cycles to external memory. The timer 
is a 16-bit binary up-counter that counts NCIk/2 cycles. The external trace timer should be initialized 














ie external-trace- timer to a value of 218 -1 - N, where N is the number of NCIk/2 cycles between the 16-byte trace array 
reads. The maximum effective transfer rate in GB/s = 16 bytes/(N x NCIk/2). A value of x‘FFEF’ 
yields the maximum rate of 1/(NCIk/2) GB/s. 

16:63 Reserved Bits are not implemented; all bits read back zero. 
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11.4 Performance Monitor Only Registers 


11.4.1 Performance Monitor Status/Interrupt Mask Register (pm_status) 


This is a dual-function register. When the register is written, a ‘1’ enables an associated interrupt, and a ‘0’ 
disables the associated interrupt. Reading this register clears the status bits and resets any pending associ- 
ated performance-monitor interrupt. (Status read, mask write). 







































































Register Short Name pm_status Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 32 bits 
Hex Offset From x‘509400’ Memory Map Area Pervasive: Performance Monitor 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
= 
[e] 
© 
5 S 
375 
o i! J 
EnO a 
= 5 5 
ga 4 
Z Q Q 
oO O O 
counter_overflow Zg Reserved 
M Vvvyv vy 4 
012 3 4 5 6 7}|8)9)10/11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Bits Field Name Description 
: Counter [n] overflowed since the last read of this register. There is one bit for each of the eight per- 
oir counter_overflow formance monitor counters. 
8 interval_time_out The interval timer overflowed since the last read of this register. 
9 trace_buffer_full The trace buffer filled since the last read of this register. 





10 trace_buffer_underflow E when an MMIO read occurred from an empty local trace buffer since the last read of 





11:31 Reserved Bits are not implemented; all bits read back zero 
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11.4.2 Performance Monitor Control Register (pm_control) 





Register Short Name 


pm_control Privilege Type Privilege 1 





Access Type 


MMIO Write Only Width 32 bits 





Hex Offset From 
BE_MMIO_Base 


x‘509408’ Memory Map Area Pervasive: Performance Monitor 





Value at Initial POR 


All bits set to zero Value During POR Set By = Scan initialization during POR 





Specification Type 

















Implementation-specific register | Unit PRV 





trace_mode 
count_qualifiers 
thermal_trace_en 


16_bit_counter 


bookmark_trace_enable 


bookmark_trace_enable1 


bookmark_trace_enable_0O 














thread1 


PPU_threadO_bookmark_trace_enable 


PPU_threadO_address_trace_enable 
PPU_thread1_address_trace_enable 


PPU_count_mode 


Reserved 


M 4 


trace_buffer_overwrite 
trace_8_bits 
external_trace_enable 


freeze 





< PPU 
< SPU 
< SPU 





O| ena_perf_mon 
—=|«  stop_at_max 


nD 
ola 
aN 

all 
ole 

















7 8 9 10 


N| SPU_address_trace_enable_0 
N| SPU_address_trace_enable_1 


Ze 
<i 
BL 
ole 
o|<— 
Jle 
co | <— 
ole 
N 
o 
to 
& 


25 26 27 28 29 30 31 


= 


12 13 


= 
zm 
= 
S 















































Bits Field Name 


Description 





0 ena_perf_mon 


Enable performance monitor 
0 Disable 
1 Enable 


The performance monitor shares resources with the trace logic analyzer, therefore software should 
enable only the performance monitor or the trace logic analyzer, not both at the same time. 





1 stop_at_max 


Stop at maximum 
0 Disable. Run the performance monitor counters through the maximum count (wrap). 
1 Enable. Perform counter overflow occurrence tracing. 





2:3 trace_mode 








Trace mode. Pack performance monitor data into 128 bits at each performance monitor interval tim- 
eout. Store the 128 bits to the trace buffer. The pm_interval must not be read through the MMIO 
when in trace modes ‘01’ and ‘11’. 

00 No trace. Do not store performance-monitor data to the trace buffer. 


01 Count trace. Store performance-monitor counter values to the trace buffer. The 
stop_at_max bit must be set to ‘1’ and the counter initial value set to zero (x‘FFOO’ for 
counting 8 bits of a 16-bit counter mode). 

10 Occurrence trace. Store 64 bits of performance-monitor bus occurrence data to the trace 
buffer. 

11 Threshold trace. Store 8 bits of performance monitor counter overflow data to the trace 
buffer. The stop_at_max bit must be set to ‘1’. Counter freeze is not supported in this mode 
(bit[11] must be ‘0’). 
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Bits Field Name Description 

Count qualifiers 

00 Do not use count qualifiers. 

01 Allow the start of counting upon PMO timeout; PM4 may not be used as a normal counter. 

10 Allow the stop of counting upon PM4 timeout; PMO may not be used as a normal counter. 

in 11 Allow the start of counting upon PMO timeout and stop upon PM4 timeout. 

T3 count_qualifiers When PMO or PM4 are enabled as count qualifiers, they must be configured as two 16-bit counters. 

They stop at the maximum count, regardless of the state of the stop_at_max pm_control bit. PM1, 

PM2, PM3, PM5, PM6, and PM7 are subject to count qualification. After the stop count qualifier 

count reaches maximum court, all counters are held. The performance monitor must be disabled 

and count qualifiers reinitialized to use the count qualifiers again. If in count trace mode, the start 
and stop of count tracing is subject to the count qualifiers. 

Thermal trace enable 

0 Disable 

6 thermal trace en 1 Enable. Enable thermal data to override data going to the trace array on bits[64:123]. The 

g ~ trace bits[0:63] might contain header and SPU address information per the trace data for- 
mats. 8-bit count tracing, occurrence tracing, and threshold tracing are not useful in con- 
junction with thermal tracing. 

16-bit counter for pm0_4, pm1_5, pm2_6, pm3_7. For each bit: 

7:10 16_bit_counter 0 Disable. Configure the counter to act as a 32-bit counter 

1 Enable. Configure the counter to act as two 16-bit counters 

Freeze all counters on overflow 

0 Disable. Do not freeze. 

11 freeze 1 Enable. Freeze all counters (including the interval timer) on any counter overflow, except 
the interval timer. When counters PMO and PM4 are configured as count qualifiers, their 
overflowing does not cause a freeze. Freezing counts is not supported for the occurrence 
tracing and threshold tracing modes (see trace bits[2,3)). 

PPU count mode. Count PPU performance monitor signals only if the signal occurs while the PPU 

is in any of the following modes: 

00 Supervisor mode 

12:13 PPU_count_mode 01 Hypervisor mode 

10 Problem mode 

11 Any of the above modes 

Trace buffer overwrite 

0 Disable. Do not overwrite. Performance monitor data is written until the trace buffer is full. 
When external trace is disabled, this provides a means to record performance data for the 
subsequent 1024 time intervals following a start event. Data may be read out of the trace 
buffer by setting the pm_control trace bits[2:3] to zero to prevent further writing to the buffer 
and then reading out the performance data from the trace buffer. When external trace is 

14 trace buffer overwrite enabled, this allows for the use of the trace buffer as a FIFO for speed matching the trace 

3 = buffer input and output data rates. 

1 Enable. Overwrite trace buffer data when the trace buffer is full. This provides for continu- 
ous writing of counts to the buffer until the occurrence of a stop event. The data from the 
most recent 1024 count intervals can then be read out of the trace buffer. After overwriting, 
because the read pointer no longer points to the oldest data, the values of the write pointer 
can be used to determine the sequential order of the data. Do not set this bit if external 
trace is enabled. 

Trace 8 bits of 16-bit counters 

0 Disable 

15 trace 8 bits 1 Enable. Trace only the lower 8 bits of the counters if the performance monitor is set for 16- 

ce bit count tracing. In this case, the counter must be initialized to x‘FFO0’. The 64-bit count 
data is written to the trace arrays (bits[64:127]) with the 8-bit count values in the following 
order: vO_v2_v4_v6_v1_v3_v5_v7. 

Trace buffer output (enable external trace) 

16 external_trace_enable 0 Disable. Count read from trace buffer through the MMIO. 

1 Enable. Performs external trace through BIC or MIC. MMIO reads from the trace buffer are 
not allowed when external trace is enabled. 
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Bits Field Name Description 
PPU thread 0 address trace enable 
0 Disable 
1 Enable. Enable PPU thread 0 branch address for recent specific branch and link instruc- 
17 PPU_thread0_address_ tions to be stored to the trace buffer, in addition to the counter data stored at specified 
trace_enable : 
intervals. 
When the PPU address or a bookmark is enabled, then trace bits[0:15] are overwritten with header 
information. 
PPU thread 1 address trace enable 
1 Enable. Enable PPU thread 1 branch address for recent specific branch and link instruc- 
18 PPU_thread1_address_ tions to be stored to the trace buffer in addition to the counter data stored at specified inter- 
trace_enable vals. 
When the PPU address or a bookmark is enabled, then trace bits[0:15] are overwritten with header 
information. 
PPU thread 0 bookmark trace enable 
0 Disable 
19 PPU_threadO_bookmar | { Enable. Enable PPU thread 0 bookmark SPR write data to be stored to the trace buffer, in 
k_trace_enable addition to the counter data stored at specified intervals. 
When the PPU address or a bookmark is enabled, then trace bits[0:15] are overwritten with header 
information. 
PPU thread 1 bookmark trace enable 
0 Disable 
20 PPU_thread1_bookmar |1 Enable. Enable PPU thread 1 bookmark SPR write data to be stored to the trace buffer, in 
k_trace_enable addition to the counter data stored at specified intervals. 
When the PPU address or a bookmark is enabled, then trace bits[0:15] are overwritten with header 
information. 
SPU address trace enable 0 
SPU_address_trace_en o Disable i : , : 
21 able 0 Enable. Overwrite trace bits[16:31] with the most recently received SPU program counter 
g (address). Setup in the SPUx must be performed to route that particular SPU’s address to 
the debug_bus event bit[1]. 
SPU address trace enable 1 
SPU_address_trace_en ? Disable , , , i 
22 able 1 Enable. Overwrite trace bits[32:47] with the most recently received SPU program counter 
= (address). Setup in the SPUx must be performed to route that particular SPU’s address to 
the debug_bus event bit[3]. 
SPU bookmark trace enable 0 
0 Disable 
23 SPU_bookmark_trace_ |1 Enable. Store an SPU bookmark record to the trace buffer. Trace bits[0:15] are overwritten 
enable_0 with header information and bits[16:31] with the most recently received SPU bookmark 
value. Setup in the SPUx must be performed to route that particular SPU’s bookmark to the 
debug_bus event bit[1]. 
SPU bookmark trace enable1 
0 Disable 
p4 SPU_bookmark_trace_ |1 Enable. Store an SPU bookmark record to the trace buffer. Trace bits[0:15] are overwritten 
enable1 with header information and bits[32:47] with the most recently received SPU bookmark 
value. Setup in the SPUx must be performed to route that particular SPU’s bookmark to the 
debug_bus event bit[3]. 
25:31 Reserved Bits are not implemented; all bits read back zero. 
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11.4.3 Performance Monitor Interval Register (pm_interval) 

















Register Short Name pm_interval Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 32 bits 

Hex Offset From x‘509410’ Memory Map Area Pervasive: Performance Monitor 
BE_MMIO_Base 

Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 




















performance_monitor_interval 


012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 











Bits Field Name Description 








Performance-monitor interval in core clock cycles (minimum interval is 10 cycles). This can be used 
in a trace mode to time the interval for writes to the trace buffer. This is a 32-bit binary up-counter. 
To program for an interval of N cycles, this counter must be initialized to a value of 

282 -N-1., (For example, x‘FFFF FFF5’ gives an interval of 10 cycles). Write the initial value latch 
or read the current count through this MMIO address. 

0:31 performance_monitor_i |The performance monitor interval timer must be initialized prior to enabling and reenabling the per- 
nterval formance monitor when using the count, threshold, and occurrence trace modes. 

Note: The total performance data rate, including potential address trace, must be lower than the 
trace buffer output rate (as determined by the external trace timer) to prevent the overflow of the 
trace buffer. 


Note: The pm_interval is undefined when trace_mode (pm_control[2:3]) is set to ‘01’ or ‘11’. 
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Register Short Name 


pm0_4 
pmi_5 
pm2_6 
pm3_7 


Privilege Type 


Privilege 1 





Access Type 


Hex Offset From 
BE_MMIO_Base 


MMIO Read/Write 


x‘509418’ 
x‘509420’ 
x‘509428’ 
x‘509430’ 


Width 


Pervasive: Performance Monitor 


Memory Map Area 


32 bits 





Value at Initial POR 








All bits set to zero 





Value During POR Set By 


Implementation-specific register 





Scan initialization during POR 




















Specification Type Unit PRV 
performance_monitor_counter 
M 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Bits Field Name Description 
32-bit count value or two 16-bit count values 
Performance-monitor counters 0, 1, 2, and 3 are read or written in either bits[0:15] or bits[0:31]. 
In 16-bit counter mode, performance-monitor counters 4, 5, 6, and 7 are read or written in bits 
E performance_monitor_c [16:31]. In the count_trace or occurrence modes of counting, the performance-monitor counters 


ounter 
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must be written before the performance monitor is enabled, and values must not be read through 

MMIO. These are binary up-counters, therefore the value read indicates the number of events 

counted. For 8-bit occurrence counting, where N is the threshold value, the counter should be initial- 

ized to 216 - 1 - N where N > O. For a 32-bit counter, this would be 232 - 1 - N where N > 0. Write the 
initial value latch or read the current count through this MMIO address. 
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11.4.5 Performance Monitor Start Stop Register (pm_start_stop) 


Start and stop for performance monitor counters. The start condition is an OR function of the start bits. The 
stop condition is an OR function of the stop bits. If the start qualifier is turned on, then the start signals act as 
a prequalifier to the start count qualifier. If the stop qualifier is turned on, then the stop signals act as a 
prequailifier to the stop count qualifier. The restart_enable signal allows a prequalifier start after a prequalifier 
stop. 
























































































































































Register Short Name pm_start_stop Privilege Type Privilege 1 
Access Type MMIO Write Only Width 32 bits 
Hex Offset From x‘509438’ Memory Map Area Pervasive: Performance Monitor 
BE_MMIO_Base 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Ss EF $ 328 
a a v a, a D 
|" *¥# 1 y x 
Sn oO oO t oO oO 
D £ § E € Ẹ 
O x <= O X <~ O 
ÈE E E ÈT tro oO ae ae a a Fa OO Ss 
£8 © 2 7 8. 8 82-2 2 2 | 2.8 8s 
o n g n x a | | a “i g n x g | 1 § 
ergg- BEePr vee BgneZ2eE y 
ETENEE E E ee re 
© oa 2 D K D O O O Q g 
Sp feat 2 nee a eS oa eo Reserved 
A A 2 a A a 2 2 2 2 A A A A 4 
0;/1/2)/3/;4/5)]6)7) 8/9 |10}11)/12)13)14)15)16)17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Bits Field Name Description 
0 TriggerO_start Start counting upon debug bus trigger 0. 
1 Trigger1_start Start counting upon debug bus trigger 1. 
2 Trigger2_start Start counting upon debug bus trigger 2. 
3 Trigger3_start Start counting upon debug bus trigger 3. 
4 B aee aa Start counting upon PPU SPR trigger 1. 
5 Event_1_start Start counting upon debug bus event 1. 
6 le a Start counting upon PPU thread 0 (th0) bookmark start (req. bookmark enabled in pm_control). 
7 e Start counting upon PPU thread 1 (th1) bookmark start (req. bookmark enabled in pm_control). 
8 TriggerO_stop Stop counting upon debug bus trigger 0. 
9 Trigger1_stop Stop counting upon debug bus trigger 1. 
10 Trigger2_stop Stop counting upon debug bus trigger 2. 
11 Trigger3_stop Stop counting upon debug bus trigger 3. 
12 Rep gener Stop counting upon PPU SPR trigger 2. 
13 Event_2_stop Stop counting upon debug bus event 2. 
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Bits Field Name Description 
14 ico agi Stop counting upon PPU thO bookmark stop (req. bookmark enabled in pm_control). 
15 PO ele ge caTs Stop counting upon PPU th1 bookmark stop (req. bookmark enabled in pm_control). 
16 Restart enable Allows prequalifier start after a prequalifier stop; requires at least one start and one stop prequalifier 
= to be set and the count qualifier (cq) start and cq stop (pm_control[4:5]) disabled. 
17:31 Reserved Bits are not implemented; all bits read back zero. 
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11.4.6 Performance Monitor Counter Control Registers (pmN_conitrol) 


These are the performance monitor counter control registers that allow control per counter. This is in contrast 
with the pm_control register, which applies across the entire performance monitor facility. 





Register Short Name 


pm0_control 
pm1_control 
pm2_control 
pm3_control 
pm4_control 
pm5_control 
pm6_control 
pm7_control 


Privilege Type 


Privilege 1 





Access Type 


MMIO Write Only 


Width 


32 bits 





Hex Offset From 
BE_MMIO_Base 


x‘509440’ 
x‘509448’ 
x‘509450’ 
x‘509458’ 
x‘509460’ 
x‘509468’ 
x‘509470’ 
x‘509478’ 


Memory Map Area 


Pervasive: Performance Monitor 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 
































Specification Type Implementation-specific register | Unit PRV 

D 

x< 

2 

2 

5 

E 

2 g 82 

£ E o g 

5 S 2 5 =| 

A © ve 8 8 Reserved 
4 Zn y 4 
O 1 2 3 4 5;/6;)7)8;9 {10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
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Bits Field Name Description 








Counter Input Multiplexer 

000000 Input is performance monitor bus bit 0 or trigger 0. 
000001 Input is performance monitor bus bit 1 or trigger 1. 
000010 Input is performance monitor bus bit 2 or trigger 2. 
000011 Input is performance monitor bus bit 3 or trigger 3. 
000100 Input is performance monitor bus bit 4 or event 0. 
000101 Input is performance monitor bus bit 5 or event 1. 
000110 Input is performance monitor bus bit 6 or event 2. 

9:5 — counter_input_multiplex 900111 Input is performance monitor bus bit 7 or event 3. 

of 001000 Input is performance monitor bus bit 8 or external_trigger_in. 
001001 Input is performance monitor bus bit 9 or spr_trigger1. 
001010 Input is performance monitor bus bit 10 or spr_trigger2. 
001011 Input is performance monitor bus bit 11. 


The contents of the performance monitor bus are determined by the settings of the group_control 
and the debug_bus_control registers. In order to count cycles regardless of any input signal, event 
or trigger, set counter_input_multiplexer (bits[0:5]) to ‘010000’, input_control (bit[6]) to ‘1’, polarity 
(bit[7]) =0. Also, see bit[6] (input_control). 


Input control 
6 input_control 0 Input is a performance-monitor bus bit selected by the counter_input_multiplexer bits. 
1 Input is the alternative trigger or event selected by the counter_input_multiplexer bits. 





Polarity 
7 polarity 0 Negative polarity. Count when 0, or, if counting edges, count negative transitions. 
1 Positive polarity. Count when 1, or, if counting edges, count positive transitions. 





Count cycles 
8 count_cycles 0 Count edges 
1 Count cycles 





Count enable 
9 count_enable 0 Disable this counter 
1 Enable this counter 





10:31 Reserved Bits are not implemented; all bits read back zero 
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11.5 Power Management Control Registers 


11.5.1 Power Management Control Register (PMCR) 

















































































































Register Short Name PMCR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509880’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
o 
wn 
= 
oO 
ci 
Lu 
Reserved t 
M vy 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30) 31 
5 = 
oO S 
(ep) o 
| a 
io” = 
D È 
| = | c 
© | o | 
xe) = xe] = 
2 o © Q 2 
2 3 wo = o 
z5 F&F - & 
Reserved oO ō (a3) 2 
M $ 44y 4 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54|55|56/57 58 59/60/61 62 63 
Bits Field Name Description 
0:30 Reserved Bits are not implemented; all bits read back zero. 
Enables the PPE Pause (0) state. 
31 PPE_pause (0) Disable 
1 Enable 
32:54 Reserved Bits are not implemented; all bits read back zero. 
Si Ki Sba Soi Slow Mode Sequence Select 
55 ow- i eq_setec |g Transition frequencies in steps of 1/8 
1 Transition frequencies in steps of 1/4 
Current Slow Mode Override 
0 Slow mode 
1 Overrides the current slow mode status stored in the hardware to the value in Curr_Slow(n) 
56 Override bits[57:59]. Hardware resets this bit to ‘0’ after the update is completed. 
Note: Setting this bit might indirectly cause a slow mode transition if the Curr_Slow(n) setting is dif- 
ferent than the Next_Slow setting. If this is the case, hardware first updates the Slow_Mode status 
register to the Curr_Slow(n) value, and then changes to the Next_Slow bit value. 
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Bits Field Name Description 

Current CBE Slow (n) State 
Controls the current CBE Slow (n) state. These bits encode the CBE core frequencies. 
Value n CBE Core Frequency (NCIk) 
000 0 Max 
001 1 Max/2 
010 2 Max/3 

57:59 Curr_Slow_n okl ? Maxa 
100 4 Max/5 
101 5 Max/6 
110 6 Max/8 
111 7 Max/10 
Note: These bit settings cannot change value until the corresponding bits in the PMSR Register 
match these bit settings. The minimum allowed frequency of the processor is 1.0 GHz whenever 
power is applied to the core. This is required for the long term reliability of the processor. 
Slow Mode Pause Control 

60 Slow_Mode_Pause_Ctrl 0 System switches to new slow mode setting without waiting for pause mode. 

1 System waits for pause mode before switching to new slow mode setting. 
Next CBE Slow (n) State 
Controls the next Slow (n) state at the CBE level. This field encodes the CBE core frequencies. 
Value n CBE Core Frequency (NCIk) 
000 0 Max 
001 1 Max/2 
010 2 Max/3 

61:63 Next_Slow_n Oiti 3 Max/4 
100 4 Max/5 
101 5 Max/6 
110 6 Max/8 
111 7 Max/10 
Note: These bit settings cannot change value until the corresponding bits in the PMSR Register 
match these bit settings. The minimum allowed frequency of the processor is 1.0 GHz whenever 
power is applied to the core. This is required for the long term reliability of the processor. 
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11.5.2 Power Management Status Register (PMSR) 


Registers 


Cell Broadband Engine 











BE_MMIO_Base 


Register Short Name PMSR Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509888’ Memory Map Area Pervasive: Thermal and Power 


Management 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 








Specification Type 





Implementation-specific register 





Unit 


Reserved 


y vy 





PRV 





PPE_pause 


















































[o 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30/31] 
Reserved BE_Slow_n 
4 4 v 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60/61 62 63 
Bits Field Name Description 
0:30 Reserved Bits are not implemented; all bits read back zero. 
31 PPE_pause Enables the PPE Pause (0) state. 
32:60 Reserved Bits are not implemented; all bits read back zero. 
CBE Slow (n) State Status 
Status for the CBE Slow (n) state. 
Value n CBE Core Frequency (NCIk) 
000 0 Max 
001 1 Max/2 
61:63 BE_Slow_n 010 2 Max/3 
011 3 Max/4 
100 4 Max/5 
101 5 Max/6 
110 6 Max/8 
111 7 Max/10 
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11.6 Thermal Management MMIO Registers 


Thermal monitor control (TMC) logic is capable of generating a thermal interrupt. The thermal interrupt is 
defined in the PowerPC Architecture and has its dedicated interrupt vector. 


The thermal sensor interrupt registers control the generation of a thermal management interrupt to the PPE. 
This set of registers consists of the thermal sensor interrupt temperature registers (TS_ITR1 and TS_ITR2), 
the Thermal Sensor Interrupt Status Register (TS_ISR), and the Thermal Sensor Interrupt Mask Register 
(TS_IMR). 


Table 11-2. Encode to Temperature Mapping 




































































Thermal Sensor Temperature Encoding 

6-bit Encode Temperature Range 6-bit Encode Temperature Range 
0 Temp < 65°C 16 95°C < Temp < 97°C 
1 65°C < Temp < 67°C 17 97°C < Temp < 99°C 
2 67°C < Temp < 69°C 18 99°C < Temp < 101°C 
3 69°C < Temp < 71°C 19 101°C < Temp < 103°C 
4 71°C < Temp < 73°C 20 103°C < Temp < 105°C 
5 73°C < Temp < 75°C 21 105°C < Temp < 107°C 
6 75°C < Temp < 77°C 22 107°C < Temp < 109°C 
T 77°C < Temp < 79°C 23 109°C < Temp < 111°C 
8 79°C < Temp < 81°C 24 111°C < Temp < 113°C 
9 81°C < Temp < 83°C 25 113°C < Temp < 115°C 
10 83°C < Temp < 85°C 26 115°C < Temp < 117°C 
11 85°C < Temp < 87°C 27 117°C < Temp < 119°C 
12 87°C < Temp < 89°C 28 119°C < Temp < 121°C 
13 89°C < Temp < 91°C 29 121°C < Temp < 123°C 
14 91 °C < Temp < 93°C 30 123°C < Temp < 125°C 
15 93°C < Temp < 95°C 31-63 125°C < Temp 

Note: Refer to the Cell Broadband Engine Datasheet for the accuracy of the Digital Thermal Sensor. 
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11.6.1 Thermal Sensor Current Temperature Status Register 1 (TS_CTSR1) 


The TS_CTSR1 register contains the encoding for the current temperature of the sensors in the SPEs. The 
thermal sensor current temperature status registers (TS_CTSR1 and TS_CTSR2) contain the encoding for 
the current temperature of each DTS. Due to latencies in the sensor’s temperature detection, latencies in 

reading these registers, and normal temperature fluctuations, the temperature reported in these registers is 
that of an earlier point in time and might not reflect the actual temperature when software receives the data. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 




















































































































bits [2:7] Cur(7) bits [34:39] | Cur(3) 
bits [10:15] | Cur(6) bits [42:47] | Cur(2) 
bits [18:23] | Cur(5) bits [50:55] = Cur(1) 
bits [26:31] | Cur(4) bits [58:63] Cur(0) 
Register Short Name TS_CTSR1 Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509800’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
ne] O ne} ne} 
o o o o 
2 Z 2 2 
o o o o 
N N N N 
£ Cur_7 £ Cur_6 £ Cur_5 £ Cur_4 
vvy vvyvy vvyvy vvyvy 4 
O 1/2 3 4 5 6 7/8 9/10 11 12 13 14 15|16 17/18 19 20 21 22 23|24 25/26 27 28 29 30 31 
ne) ne) ne) ne) 
g g g g 
© © © © 
N N N N 
£ Cur_3 £ Cur_2 £ Cur_1 £ Cur_0 
%4 4 y vvyvy 44 4y 44 4y 4 
32 33/34 35 36 37 38 39/40 41/42 43 44 45 46 47/48 49|50 51 52 53 54 55/56 57/58 59 60 61 62 63 
Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
2:7 Cur 7 Current temperature level digital thermal sensor 7. If the sensor is not tracking, it reports 0. This 
' = sensor is located in physical SPE 7. 
8:9 Reserved Bits are not implemented; all bits read back zero. 
10:15 Cur 6 Current temperature level digital thermal sensor 6. If the sensor is not tracking, it reports 0. This 
i = sensor is located in physical SPE 6. 
16:17 Reserved Bits are not implemented; all bits read back zero. 
18:23 Cur_5 Current temperature level digital thermal sensor 5. If the sensor is not tracking, it reports 0. This 


sensor is located in physical SPE 5. 


24:25 Reserved Bits are not implemented; all bits read back zero. 

















Version 1.5 Pervasive MMIO Registers 
April 2, 2007 Page 265 of 357 


SONY 


Registers “> SONY 


COMPUTER: 
SREMARMER © 


Cell Broadband Engine 


















































Bits Field Name Description 
; Current temperature level digital thermal sensor 4. If the sensor is not tracking, it reports 0. This 
26:31 Cur_4 : : A 
sensor is located in physical SPE 4. 
32:33 Reserved Bits are not implemented; all bits read back zero. 
34:39 Cur 3 Current temperature level digital thermal sensor 3. If the sensor is not tracking, it reports 0. This 
i = sensor is located in physical SPE 3. 
40:41 Reserved Bits are not implemented; all bits read back zero. 
. Current temperature level digital thermal sensor 2. If the sensor is not tracking, it reports 0. This 
42:47 Cur_2 f s : 
sensor is located in physical SPE 2. 
48:49 Reserved Bits are not implemented; all bits read back zero. 
; Current temperature level digital thermal sensor 1. If the sensor is not tracking, it reports 0. This 
50:55 Cur_1 ‘ : 4 
sensor is located in physical SPE 1. 
56:57 Reserved Bits are not implemented; all bits read back zero. 
3 Current temperature level digital thermal sensor 0. If the sensor is not tracking, it reports 0. This 
58:63 Cur_0 : : ; 
sensor is located in physical SPE 0. 
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11.6.2 Thermal Sensor Current Temperature Status Register 2 (TS_CTSR2) 


This register contains the encoding for the current temperature of the sensor in the PPE and the sensor 
located adjacent to the linear thermal sensor. The thermal sensor current temperature status registers 
(TS_CTSR1 and TS_CTSR2) contain the encoding for the current temperature of each DTS. Due to latencies 
in the sensor’s temperature detection, latencies in reading these registers, and normal temperature fluctua- 
tions, the temperature reported in these registers is that of an earlier point in time and might not reflect the 
actual temperature when software receives the data. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 


bits [26:31] Cur(7) 
bits [58:63] Cur(8) 













































































Register Short Name TS_CTSR2 Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509808’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Reserved Cur_9 
M voy 4 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25)26 27 28 29 30 31 
Reserved Cur_8 
M 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57/58 59 60 61 62 63 
Bits Field Name Description 
0:25 Reserved Bits are not implemented; all bits read back zero. 
26:31 Cur 9 Current temperature level digital thermal sensor 9. 
i ~ This sensor is located adjacent to the linear thermal sensor. If the sensor is not tracking, it reports 0. 
32:57 Reserved Bits are not implemented; all bits read back zero. 
58:63 Cur.8 Current temperature level digital thermal sensor 8. 


This sensor is located in the PPU. If the sensor is not tracking, it reports 0. 

















The thermal sensor maximum temperature status registers (TS_MTSR1 and TS_MTSR2) contain the 
encoding for the maximum temperature reached for each sensor from the time of the last read of these regis- 
ters. Reading these registers causes the TMCU to copy the current temperature for each sensor into the 
register. After the read, the TMCU continues to track the maximum temperature starting from this point. Each 
register is independent; a read of one register does not affect the contents of the other. 
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11.6.3 Thermal Sensor Maximum Temperature Status Register 1 (TS_MTSR1) 


This register contains the encoding for the maximum temperature of the sensors located in the SPEs. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 












































































































































bits [2:7] | Max(7) bits [84:39] Max(3) 
bits [10:15] Max(6) bits [42:47] Max(2) 
bits [18:23] Max(5) bits [50:55] Max(1) 
bits [26:31] Max(4) bits [58:63] Max(0) 
Register Short Name TS_MTSR1 Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509810’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
ne) ne} ne] ne) 
£ $ £ $ 
o o o o 
N n n N 
£ Max_7 £ Max_6 £ Max_5 £ Max_4 
%4 vy 44 4y 44 4y 44 4y 4 
01/2 3 4 5 6 7/8 9/10 11 12 13 14 15|16 17/18 19 20 21 22 23|24 25/26 27 28 29 30 31 
ne} ne} ne} ne} 
o o o o 
2 2 2 2 
® o ® o 
N N N N 
£ Max_3 £ Max_2 £ Max_1 £ Max_0 
Vv vy vv vvvy vvvy 4 
32 33/34 35 36 37 38 39/40 41/42 43 44 45 46 47/48 49|50 51 52 53 54 55/56 57/58 59 60 61 62 63 
Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
2:7 Max 7 Maximum temperature level reached by digital thermal sensor 7 from the time of the last read of this 
` T register. Digital thermal sensor 7 is located in physical SPE 7. 
8:9 Reserved Bits are not implemented; all bits read back zero. 
10:15 Max 6 Maximum temperature level reached by digital thermal sensor 6 from the time of the last read of this 
: z register. Digital thermal sensor 6 is located in physical SPE 6. 
16:17 Reserved Bits are not implemented; all bits read back zero. 
18:23 Max 5 Maximum temperature level reached by digital thermal sensor 5 from the time of the last read of this 
` = register. Digital thermal sensor 5 is located in physical SPE 5. 
24:25 Reserved Bits are not implemented; all bits read back zero. 
26:31 Max 4 Maximum temperature level reached by digital thermal sensor 4 from the time of the last read of this 
` E register. Digital thermal sensor 4 is located in physical SPE 4. 
32:33 Reserved Bits are not implemented; all bits read back zero. 
34:39 Max 3 Maximum temperature level reached by digital thermal sensor 3 from the time of the last read of this 
i 5 register. Digital thermal sensor 3 is located in physical SPE 3. 
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Bits Field Name Description 
40:41 Reserved Bits are not implemented; all bits read back zero. 
42:47 Max 2 Maximum temperature level reached by digital thermal sensor 2 from the time of the last read of this 
` -= register. Digital thermal sensor 2 is located in physical SPE 2. 
48:49 Reserved Bits are not implemented; all bits read back zero. 
50:55 Max 1 Maximum temperature level reached by digital thermal sensor 1 from the time of the last read of this 
` = register. Digital thermal sensor 1 is located in physical SPE 1. 
56:57 Reserved Bits are not implemented; all bits read back zero. 
58:63 Max 0 Maximum temperature level reached by digital thermal sensor 0 from the time of the last read of this 
` z register. Digital thermal sensor 0 is located in physical SPE 0. 
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11.6.4 Thermal Sensor Maximum Temperature Status Register 2 (TS_MTSR2) 


This register contains the encoding for the maximum temperature of the sensors located in the PPE and adja- 
cent to the linear thermal sensor. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 


bits [26:31] Max(9) 
bits [58:63] Max(8) 
























































Register Short Name TS_MTSR2 Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 
Hex Offset From x‘509818’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Reserved Max_9 
M vy 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25/26 27 28 29 30 31 
Reserved Max_8 


32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57/58 59 60 61 62 63 























Bits Field Name Description 
0:25 Reserved Bits are not implemented; all bits read back zero. 
26:31 Max 9 Maximum temperature level reached by digital thermal sensor 9 from the time of the last read of this 
= register. Digital thermal sensor 9 is located adjacent to the linear thermal sensor. 
32:57 Reserved Bits are not implemented; all bits read back zero. 
58:63 Max_8 Maximum temperature level reached by digital thermal sensor 8 from the time of the last read of this 














register. Digital thermal sensor 8 is located in the PPU. 
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11.6.5 Thermal Sensor Interrupt Temperature Register 1 (TS_ITR1) 


The TS_ITR1 register contains the interrupt temperature level for the sensors located in the SPEs. The 
encoded interrupt temperature levels in this register are compared to the corresponding interrupt temperature 
encoding in TS_CTSR1. The result of these comparisons is used to generate a thermal management inter- 
rupt. Each sensor's interrupt temperature level is independent. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 
































bits [2:7] IntTemp(7) bits [84:39] IntTemp(3) 
bits [10:15] IntTemp(6) bits [42:47] IntTemp(2) 
bits [18:23] IntTemp(5) bits [50:55] IntTemp(1) 
bits [ 26:31] IntTemp(4) bits [58:63] IntTemp(0) 
Register Short Name TS_ITR1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509820’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
3 3 3 3 
2 2 2 2 
® ® o o 
N N N N 
£ IntTemp_7 £ IntTemp_6 £ IntTemp_5 £ IntTemp_4 


t4 y t44 y t44 y t44 y 4 
lo 1/2 3 4 5 6 7|8 9/10 11 12 13 14 15|16 17|18 19 20 21 22 23|24 25/26 27 28 29 30 31] 






















































































ne} ne} ne} ne) 
o o o o 
2 2 2 2 
o o o o 
N N N N 
£ IntTemp_3 £ IntTemp_2 £ IntTemp_1 £ IntTemp_0 
%4 4 y $ 44x $ 44y $ 44x 4 
32 33/34 35 36 37 38 39/40 41/42 43 44 45 46 47/48 49|50 51 52 53 54 55/56 57/58 59 60 61 62 63 
Bits Field Name Description 
0:1 Reserved Bits are not implemented; all bits read back zero. 
; Temperature level at which digital thermal sensor 7 causes an interrupt. Digital thermal sensor 7 is 
2:7 IntTemp_7 : . 
located in physical SPE 7. 
8:9 Reserved Bits are not implemented; all bits read back zero. 
. Temperature level at which digital thermal sensor 6 causes an interrupt. Digital thermal sensor 6 is 
1013 IntTemp_6 located in physical SPE 6. 
16:17 Reserved Bits are not implemented; all bits read back zero. 
: Temperature level at which digital thermal sensor 5 causes an interrupt. Digital thermal sensor 5 is 
18:23 IntTemp_5 located in physical SPE 5. 
24:25 Reserved Bits are not implemented; all bits read back zero. 
26:31 IntTemp_4 Temperature level at which digital thermal sensor 4 causes an interrupt. Digital thermal sensor 4 is 











located in physical SPE 4. 
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Bits Field Name Description 

32:33 Reserved Bits are not implemented; all bits read back zero. 

i Temperature level at which digital thermal sensor 3 causes an interrupt. Digital thermal sensor 3 is 
oe IntTemp_3 located in physical SPE 3. 
40:41 Reserved Bits are not implemented; all bits read back zero. 

. Temperature level at which digital thermal sensor 2 causes an interrupt. Digital thermal sensor 2 is 
nee IntTemp_2 located in physical SPE 2. 
48:49 Reserved Bits are not implemented; all bits read back zero. 

F Temperature level at which digital thermal sensor 1 causes an interrupt. Digital thermal sensor 1 is 
30:59 IntTemp_t located in physical SPE 1. 
56:57 Reserved Bits are not implemented; all bits read back zero. 

. Temperature level at which digital thermal sensor 0 causes an interrupt. Digital thermal sensor 0 is 
ak Inthemp_0 located in physical SPE 0. 
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11.6.6 Thermal Sensor Interrupt Temperature Register 2 (TS_ITR2) 


The TS_ITR2 register contains the interrupt temperature level for the sensors located in the PPE and adja- 
cent to the linear thermal sensor. The encoded interrupt temperature levels in this register are compared to 
the corresponding interrupt temperature encoding in TS_CTSR2. The result of these comparisons is used to 
generate a thermal management interrupt. Each sensor’s interrupt temperature level is independent. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 


bits [26:31] IntTemp(9) 
bits [58:63] IntTemp(8) 



































Register Short Name TS_ITR2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509828’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 

Reserved IntTemp_9 


[o 1 2 3 4 5 6 7 8 9 1011 12 13 14 15 16 17 18 19 20 21 22 23 24 25|26 27 28 29 30 31| 









































Reserved IntTemp_8 

M 4 y 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57/58 59 60 61 62 63 

Bits Field Name Description 

0:25 Reserved Bits are not implemented; all bits read back zero. 

26:31 IntTemp 9 Temperature level at which digital thermal sensor 9 causes an interrupt. Digital thermal sensor 9 is 

` P- located adjacent to the linear thermal sensor. 
32:57 Reserved Bits are not implemented; all bits read back zero. 
58:63 IntTemp_8 Temperature level at which digital thermal sensor 8 causes an interrupt. Digital thermal sensor 8 is 


located in the PPU. 
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11.6.7 Thermal Sensor Global Interrupt Temperature Register (TS_GITR) 


The TS_GITR register contains a second interrupt temperature level in addition to the independent interrupt 
temperature levels set in TS_ITR1 and TS_ITR2. This level applies to all sensors in the Cell Broadband 
Engine. The encoded global interrupt temperature level in this register is compared to the current tempera- 
ture encoding for each sensor. The result of these comparisons is used to generate a thermal management 
interrupt. 


The TS_GITR register provides early indication of a temperature rise in the CBE. The interrupt corresponding 
to this temperature point can cause an attention to a system controller. Privileged software or the system 
controller or both can use this information to start actions to control the temperature (such as increasing the 
fan speed, rebalancing the application running, and so on). 


Note: See Table 11-2 on page 264 for the mapping of the temperature encoding for the following bit range 
and field name: 


bits [58:63] GIntTemp(8) 






















































































Register Short Name TS_GITR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509830’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Reserved 
4 > 
O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved GintTemp 
< 
viv 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57/58 59 60 61 62 63 
Bits Field Name Description 
0:57 Reserved Bits are not implemented; all bits read back zero. 
58:63 GintTemp Global temperature level at which any enable digital thermal sensor causes an interrupt. 
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11.6.8 Thermal Sensor Interrupt Status Register (TS_ISR) 


The TS_ISR register identifies which sensors met the interrupt condition. This register contains two sets of 
status bits; the digital sensor global threshold interrupt status bits (TS_ISR[22:31]) and the digital sensor 
threshold interrupt status bits (TS_ISR[54:63)). 


Hardware sets the status bits as described in the following tables. After the status bit is set to ‘1’, the state is 
maintained until reset to ‘0’ by privileged software. Privileged software resets a status bit to ‘0’ by writing a ‘1’ 
to the corresponding bit in the TS_ISR. 






























































Register Short Name TS_ISR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509838’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 

Reserved Gb Reserved Gx 
M vv y + y 4 
012 3 4 5 6 7 8 9 10 11 12 13 14/15/16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 

Reserved Sx 

M viv 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53/54 55 56 57 58 59 60 61 62 63 





















































Bits Field Name Description 

0:14 Reserved Bits are not implemented. All bits read back zero. 
Digital Sensor Global Below Threshold interrupt status. This bit is not set when the interrupt range is 

G configured to above or equal to the global interrupt temperature level. 
ua b 0 Interrupt not pending for Digital Thermal Sensor. 

1 Interrupt pending for Digital Thermal Sensor below the global threshold interrupt level. 

16:21 Reserved Bits are not implemented. All bits read back zero. 
Digital Sensor Global Threshold interrupt status (where x equals the sensor number). These bits 
are not set when the interrupt range is configured to below the global interrupt temperature level. 
The sensor numbers range left to right from 9 to 0, so that bit 22 is associated with sensor number 9 
and bit 31 is associated with sensor number 0. See TS_CTSR1 and TS_CTSR2 for sensor number 

22:31 Gx mapping. 
For each bit: 
x‘000’ Interrupt not pending for Digital Thermal Sensor x. 
x‘001’ Interrupt pending for Digital Thermal Sensor x. 

32:53 Reserved Bits are not implemented. All bits read back zero. 
Digital Sensor Threshold interrupt status (where x equals sensor number). The sensor numbers 
range left to right from 9 to 0, so that bit 54 is associated with sensor number 9 and bit 63 is associ- 
ated with sensor number 0. See TS_CTSR1 and TS_CTSR2 for sensor number mapping. 

54:63 Sx For each bit: 
x‘000’ Interrupt not pending for Digital Thermal Sensor x. 
x‘001’ Interrupt pending for Digital Thermal Sensor x. 
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Programming Note: If the interrupt condition is still met for a status bit that is being reset, the status bit 
remains set. To avoid an immediate interrupt, privileged software should either mask the interrupting condi- 
tion using the TS_IMR register or ensure that the interrupting condition is not met before resetting the inter- 
rupt status bit. 


11.6.9 Thermal Sensor Interrupt Mask Register (TS_IMR) 


The TS_IMR register contains mask bits (Mx) to prevent an interrupt status bit from generating a thermal 
management interrupt to the PPE. It also contains controls (Bx) to select the temperature range for the inter- 
rupt conditions. In addition, this register contains controls for (Cx) to select which sensors participate in the 
global interrupt condition. 







































































Register Short Name TS_IMR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509840’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Q 
Reserved & A BG Reserved Cx 
Y yyy Vy vy 4 
012 3 4 5 6 7 8 9 10 11 12|13|14/15|16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
Reserved Bx Reserved Mx 
M voy voy voy 4 





32 33 34 35 36 37/38 39 40 41 42 43 44 45 46 47/48 49 50 51 52 53|54 55 56 57 58 59 60 61 62 63 

















Bits Field Name Description 





0:12 Reserved Bits are not implemented; all bits read back zero. 





Mask for Digital Thermal Global Below Threshold interrupt 
0 Sensor will not cause a global interrupt (disabled). 
13 Cgb 1 Sensor may cause a global interrupt (enabled). 


Note: This bit only affects the interrupt generation when the global interrupt is set for interrupting 
when all sensors are below the threshold. 





Enable the assertion of system controller “Attention” signal 




















14 A 0 Attention will not be asserted (disabled). 
1 Attention will be asserted when the Gb or any Gx bit is set (enabled). 
Direction for Digital Thermal Global Threshold interrupt 
0 Interrupt when the temperature of any enabled sensor is above or equal to the global Inter- 
15 BG rupt temperature level. 
1 Interrupt when the temperatures of all enabled sensors are below the global interrupt tem- 
perature level. 
16:21 Reserved Bits are not implemented; all bits read back zero. 
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Bits 


Field Name 


Description 








22:31 


Cx 


Mask for Digital Thermal Global Threshold interrupt (where x equals sensor number). The sensor 
numbers range left to right from 9 to 0, so that bit 22 is associated with sensor number 9 and bit 31 
is associated with sensor number 0. See TS_CTSR1 and TS_CTSR2 for sensor number mapping. 


For each bit: 
0 Sensor will not cause a global interrupt (disabled). 
1 Sensor may cause a global interrupt (enabled). 





32:37 


Reserved 


Bits are not implemented; all bits read back zero. 





38:47 


Bx 


Direction for Digital Thermal Threshold interrupt (where x equals sensor number). The sensor num- 
bers range left to right from 9 to 0, so that bit 38 is associated with sensor number 9 and bit 47 is 
associated with sensor number 0. See TS_CTSR1 and TS_CTSR2 for sensor number mapping. 


For each bit: 
0 Interrupt when temperature is above or equal to the interrupt temperature level. 
1 Interrupt when temperature is below the interrupt temperature level. 





48:53 


Reserved 


Bits are not implemented; all bits read back zero. 





54:63 








Mx 





Mask for Digital Thermal Threshold interrupt (where x equals sensor number). The sensor numbers 
range left to right from 9 to 0, so that bit 54 is associated with sensor number 9 and bit 63 is associ- 
ated with sensor number 0. See TS_CTSR1 and TS_CTSR2 for sensor number mapping. 


For each bit: 
0 Interrupt is disabled. 
1 Interrupt is enabled. 
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11.6.10 Thermal Management Control Register 1 (TM_CR1) 
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This register contains the controls for the sensors located in the SPEs. Each sensor has independent 


controls. 











BE_MMIO_Base 


Register Short Name TM_CR1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509848’ Memory Map Area Pervasive: Thermal and Power 


Management 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 























































































































Specification Type Implementation-specific register | Unit PRV 
Reserved Cntl_7 Reserved Cntl_6 Reserved Cntl_5 Reserved Cntl_4 
4 viv 4 x vv viv vv 4 4 viv 4 
O 1 2 3 4/5 6 7/8 9 10 11 12/13 14 15/16 17 18 19 20/21 22 23/24 25 26 27 28|29 30 31 
Reserved Cntl_3 Reserved Cntl_2 Reserved Cntl_1 Reserved Cntl_O 
M vy viv vv 4 y vv YY vv 4 
32 33 34 35 36/37 38 39/40 41 42 43 44|45 46 47/48 49 50 51 52/53 54 55/56 57 58 59 60/61 62 63 
Bits Field Name Description 
0:4 Reserved Bits are not implemented; all bits read back zero. 

Thermal management control for digital thermal sensor 7. Digital thermal sensor 7 is located in 

physical SPE 7. 

Oxx Throttling disabled. The SPE’s execution will not be throttled or stopped when the 
temperature reaches the throttle point. 

100 Normal Operation. Throttling and SPE stop safety is enabled. 

; 101 Always throttled. The SPE’s execution is throttled regardless of temperature. SPE stop 
5:7 Cntl_7 : 
safety is enabled. 

110 SPE stop safety disabled. Throttling will occur as defined. The SPE is not stopped if the 
encoded current temperature reaches the FullThrottleSPE point. 

111 Always throttled and core stop disabled. The SPE’s execution will be throttled regardless of 
temperature. The SPE is not stopped if encoded current temperature reaches the FullTh- 
rottleSPE point. 

8:12 Reserved Bits are not implemented; all bits read back zero. 

13:15 Cntl 6 Thermal management control for digital thermal sensor 6. Digital thermal sensor 6 is located in 
i = physical SPE 6. The bit definition for this field is the same as the Cntl_7 field. 

16:20 Reserved Bits are not implemented; all bits read back zero. 

21:23 Cntl 5 Thermal management control for digital thermal sensor 5. Digital thermal sensor 5 is located in 
` = physical SPE 5. The bit definition for this field is the same as the Cntl_7 field. 

24:28 Reserved Bits are not implemented; all bits read back zero. 

29:31 Cntl 4 Thermal management control for digital thermal sensor 4. Digital thermal sensor 4 is located in 
f = physical SPE 4. The bit definition for this field is the same as the Cntl_7 field. 

32:36 Reserved Bits are not implemented; all bits read back zero. 

37:39 Cntl 3 Thermal management control for digital thermal sensor 3. Digital thermal sensor 3 is located in 
, = physical SPE 3. The bit definition for this field is the same as the Cntl_7 field. 

40:44 Reserved Bits are not implemented; all bits read back zero. 
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Bits Field Name Description 

45:47 Cntl 2 Thermal management control for digital thermal sensor 2. Digital thermal sensor 2 is located in 
, = physical SPE 2. The bit definition for this field is the same as the Cntl_7 field. 

48:52 Reserved Bits are not implemented; all bits read back zero. 

53:55 Cnt 1 Thermal management control for digital thermal sensor 1. Digital thermal sensor 1 is located in 
. = physical SPE 1. The bit definition for this field is the same as the Cntl_7 field. 

56:60 Reserved Bits are not implemented; all bits read back zero. 

61:63 Cntl_0 Thermal management control for digital thermal sensor 0. Digital thermal sensor 0 is located in 
f = physical SPE 0. The bit definition for this field is the same as the Cntl_7 field. 














11.6.11 Thermal Management Control Register 2 (TM_CR2) 


This register contains the controls for the sensors located in the PPE and the sensor located adjacent to the 
linear thermal sensor. 



































Register Short Name TM_CR2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509850’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 

Reserved 


oss O T a 









































[o 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved Cntl_8 
< yý y} 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60/61 62 63 
Bits Field Name Description 
0:60 Reserved Bits are not implemented; all bits read back zero. 
Thermal management control for digital thermal sensor 8. Digital thermal sensor 8 is located in the 
PPE. 
Oxx Throttling disabled. The core’s execution is not throttled or stopped when the temperature 
reaches the throttle point. 
100 Normal Operation. Throttling and core stop safety is enabled. 
. 101 Always throttled. The core’s execution is throttled regardless of temperature. Core stop 
61:63 Cntl_8 : 
safety is enabled. 
110 Core stop safety disabled. Throttling occurs as defined. The core will not be stopped if the 
encoded current temperature reaches the FullThrottlePPC point. 
111 Always throttled and core stop disabled. The core’s execution is throttled regardless of 
temperature. The core is not stopped if the encoded current temperature reaches the 
FullThrottlePPC point. 
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11.6.12 Thermal Management System Interrupt Mask Register (TM_SIMR) 


This register controls which PPE interrupts cause the thermal management logic to exit a throttling state on 
the PPE. Throttling is exited for both PPE threads, regardless of the thread targeted by the interrupt. Throt- 
tling of the SPEs is never exited based on a system interrupt condition. The PPE interrupt conditions that can 
override a throttling condition are listed below: 


e External 

e Decrementer 

e Hypervisor Decrementer 
e System Error 

e Thermal Management 



































Register Short Name TM_SIMR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509858’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 

Reserved 


E e E 


O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 










































































Reserved T S H DE 
< 
#44 a 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58/59/60] 61 | 62/63 
Bits Field Name Description 
0:58 Reserved Bits are not implemented; all bits read back zero. 
Mask for Thermal Management Interrupt 
59 T 0 Interrupt does not exit PPE throttling state (disabled). 
1 Interrupt exits the PPE throttling state (enabled). 
Mask for System Error Interrupt 
60 S (0) Interrupt does not exit PPE throttling state (disabled). 
1 Interrupt exits the PPE throttling state (enabled). 
Mask for Hypervisor Decrementer Interrupt 
61 H 0 Interrupt does not exit PPE throttling state (disabled). 
1 Interrupt exits the PPE throttling state (enabled). 
Mask for Decrementer Interrupt 
62 D 0 Interrupt does not exit PPE throttling state (disabled). 
1 Interrupt exits the PPE throttling state (enabled). 
Mask for External Interrupt 
63 E 0 Interrupt does not exit PPE throttling state (disabled). 
1 Interrupt exits the PPE throttling state (enabled). 
Pervasive MMIO Registers Version 1.5 


Page 280 of 357 April 2, 2007 


SONY 


SONY “> Registers 


Cell Broadband Engine 


11.6.13 Thermal Management Throttle Point Register (TM_TPR) 


This register contains the encoded temperature points at which throttling of a core’s execution begins and 
ends. This register also contains an encoded temperature point at which a core’s execution is fully throttled 
(in other words, stopped). 


The values in this register are used to set three temperature points for transition between the three thermal 
management states; 1) Normal Run (N), 2) Core Throttled (T), and 3) Core Stopped (S). Independent temper- 
ature points are supported for the PPE and the SPEs. 


When the encoded current temperature of a sensor in the TS_CTSR is equal to or greater than the throttle 
temperature ([18:23] or [50:55]), throttling execution of the corresponding core begins, if enabled. Execution 
throttling continues until the encoded current temperature of the corresponding sensor is less than the 
encoded temperature to end throttling ([26:31] or [58:63]). As a safety measure, if the encoded current 
temperature is equal to or greater than the full throttle point ([10:15] or [42:47]), the corresponding core is 
stopped. 


Note: See Table 11-2 on page 264 for mappings of the temperature encodings for the following bit ranges 
and field names: 


bits [10:15] FullThrottlePPC 
bits [18:23] ThrottlePPC 
bits [26:31] EndThrottlePPC 
bits [42:47] FullThrottleSPE 
bits [50:55] ThrottleSPE 
bits [58:63] EndThrottleSPE 

















Register Short Name TM_TPR Privilege Type Privilege 1 

Access Type MMIO Read/Write Width 64 bits 

Hex Offset From x‘509860’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 

Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
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Reserved 
Reserved 


FullThrottlePPC ThrottlePPC EndThrottlePPC 





y 











vv Yvvy vvvy 4 








012 3 4 5 6 7 8 9410 11 12 13 14 15/16 17/18 19 20 21 22 23|24 25)26 27 28 29 30 31 




















Reserved 


FullThrottleSPE ThrottleSPE EndThrottleSPE 


Reserved 
Reserved 








vy¥ vvvy t4 4y 4 





32 33 34 35 36 37 38 39 40 41|42 43 44 45 46 47/48 49|50 51 52 53 54 55/56 57/58 59 60 61 62 63 























Bits Field Name 


Description 





0:9 Reserved 


Bits are not implemented; all bits read back zero. 





10:15 FullThrottlePPC 


16:17 Reserved 


Full throttling temperature point. The PPC is stopped when TS_CTSR2[58:63] is greater than or 
equal to TM_TPR[10:15]. Typically the value of this field should be greater than the value of the 
ThrottlePPC field. Setting this field to a value less than or equal to the ThrottlePPC field prevents 
dynamic throttling. Setting the value of this field to x‘1F’ effectively prevents the PPC from ever 
being stopped. All values for this field are valid. 


Bits are not implemented; all bits read back zero. 





18:23 ThrottlePPC 


Throttle temperature point. Dynamic throttling of the PPC begins when TS_CTSR2[58:63] is greater 
than or equal to TM_TPR[26:31]. Typically the value of this field should be a value corresponding to 
a temperature less than the maximum junction temperature supported by an implementation. (Refer 
to the product specific datasheet for the maximum junction temperature.) Setting the value of this 
field to x‘1F’ effectively prevents the PPC from ever being dynamically throttled. Setting the value of 
this field to x‘00’ effectively throttles the PPC regardless of the temperature. All values for this field 
are valid. 





24:25 Reserved 


26:31 EndThrottlePPC 


Bits are not implemented; all bits read back zero. 


End of throttle temperature point. Dynamic throttling of the PPC ceases when TS_CTSR2[58:63] is 


less than TM_TPR[26:31]. Typically, the value of this field should be less than the value of the 
ThrottlePPC field. Setting this field to a value greater than the ThrottlePPC field might prevent 
dynamic throttling. A value equal to the ThrottlePPC field provides very little hysteresis between the 
starting and stopping throttle point. All values for this field are valid. 





32:41 Reserved 


Bits are not implemented; all bits read back zero. 





42:47 FullThrottleSPE 


Full throttling temperature point. The SPE will be stopped when TS_CTSR2[Cur(x)] is greater than 
or equal to TM_TPR[42:46] (where 0 < x < 7). Typically the value of this field should be greater than 
the value of the ThrottleSPE field. Setting this field to a value less than or equal to the ThrottleSPE 
field prevents dynamic throttling. Setting the value of this field to x‘1F’ effectively prevents the SPE 
from ever being stopped. All values for this field are valid. 





48:49 Reserved 


Bits are not implemented; all bits read back zero. 





50:55 ThrottleSPE 


Throttle temperature point. Dynamic throttling of the SPE begins when TS_CTSR2[Cur(x)] > 
TM_TPR[58:63] (where 0 < x < 7). Typically the value of this field should be a value corresponding 
to a temperature less than the maximum junction temperature supported by an implementation. 
Refer to the product specific datasheet for the maximum junction temperature. Setting the value of 
this field to x‘1F’ effectively prevents the SPE from ever being dynamically throttled. Setting the 
value of this field to x‘00’ effectively throttles the SPE regardless of the temperature. All values for 
this field are valid. 





56:57 Reserved 


Bits are not implemented; all bits read back zero. 





58:63 EndThrottleSPE 











End of throttle temperature point. Dynamic throttling of the SPE ceases when TS_CTSR2[Cur(x)] is 
less than TM_TPR[58:63] (where 0 < x < 7). Typically the value of this field should be less than the 
value of the ThrottleSPE field. Setting this field to a value greater than the ThrottleSPE field might 
prevent dynamic throttling. A value equal to the ThrottleSPE field provides very little hysteresis 
between the starting and stopping throttle point. All values for this field are valid. 
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11.6.14 Thermal Management Stop Time Register 1 (TM_STR1) 


The thermal management stop time registers control the amount of throttling applied to a specific core in the 
thermal management throttled state. The values in this register are expressed in a percentage of time a core 
is stopped versus the time a core is run (CoreStop(x)/32). The actual number of clocks that a core is stopped 
and run is controlled by the Thermal Management Scale Register. 


The Thermal Management Stop Time Register 1 contains the throttling stop times for the sensors located in 
the SPEs. Each sensor has independent stop time. 











Register Short Name TM_STR1 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509868’ Memory Map Area Pervasive: Thermal and Power 


BE_MMIO_Base 
Value at Initial POR 


Management 





All bits set to zero Value During POR Set By Scan initialization during POR 


















































































































































Specification Type Implementation-specific register | Unit PRV 
Reserved StopCore_7 Reserved StopCore_6 Reserved StopCore_5 Reserved StopCore_4 
4 vv 4 x vv vv vv vv viv 4 
O 12/3 4 5 6 7/8 9 10/11 12 13 14 15|16 17 18|19 20 21 22 23|24 25 26/27 28 29 30 31 
Reserved StopCore_3 Reserved StopCore_2 Reserved StopCore_1 Reserved StopCore_0 
M 4 4 4 y viv vv viv vv 4 4 4 
32 33 34/35 36 37 38 39/40 41 42|43 44 45 46 47/48 49 50/51 52 53 54 55/56 57 58/59 60 61 62 63 
Bits Field Name Description 
0:2 Reserved Bits are not implemented; all bits read back zero. 
3:7 StopCore 7 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
` P = dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
8:10 Reserved Bits are not implemented; all bits read back zero. 
11:15 StopCore 6 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
; p = dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
16:18 Reserved Bits are not implemented; all bits read back zero. 
19:23 StopCore 5 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
i P = dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
24:26 Reserved Bits are not implemented; all bits read back zero. 
27:31 StopCore 4 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
. P = dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
32:34 Reserved Bits are not implemented; all bits read back zero. 
35:39 StooCore 3 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
` P = dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
40:42 Reserved Bits are not implemented; all bits read back zero. 
43:47 StopCore 2 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
` P = dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
48:50 Reserved Bits are not implemented; all bits read back zero. 
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Bits Field Name Description 
51:55 StopCore 1 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 
P S dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 
56:58 Reserved Bits are not implemented; all bits read back zero. 
59:63 StopCore_0 Throttling Stop Time when throttle temperature high reached. Setting this register to O results in the 











dynamic throttling of the core to be disabled. A setting of 0 does not disable the core stop safety. 








11.6.15 Thermal Management Stop Time Register 2 (TM_STR2) 


The thermal management stop time registers control the amount of throttling applied to a specific core in the 
thermal management throttled state. The values in this register are expressed as a percentage of time that a 
core is stopped versus the time that a core is run (CoreStop(x)/32). The actual number of clocks that a core is 
stopped and run is controlled by the Thermal Management Scale Register. 


The Thermal Management Control Register 2 contains the throttling stop times for the sensor located in the 
PPE. 




































































Register Short Name TM_STR2 Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509870’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Reserved 

J > 

012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved StopCore_8 
< 
vv 4 

32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58|59 60 61 62 63 

Bits Field Name Description 

0:58 Reserved Bits are not implemented; all bits read back zero. 

59:63 StopCore 8 Throttling Stop Time when throttle temperature high reached. Setting this register to 0 disables the 

i P = dynamic throttling of the core. A setting of 0 does not disable the core stop safety. 
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11.6.16 Thermal Management Throitle Scale Register (TM_TSR) 


Registers 


Cell Broadband Engine 


The Thermal Management Throttle Scale Register controls the actual number of cycles that a core is stopped 
and run during the thermal management throttle state. The Thermal Management Throttle Scale Register 


contains the scale factors for the sensors located in the SPEs and PPC. 





TM_TSR Privilege Type 


Access Type MMIO Read/Write Width 


Privilege 1 


Register Short Name 


64 bits 





Hex Offset From x‘509878’ 


BE_MMIO_Base 


Memory Map Area 


Pervasive: Thermal and Power 
Management 





Value at Initial POR All bits set to zero Value During POR Set By 


Scan initialization during POR 



















































































Specification Type Implementation-specific register | Unit PRV 
Reserved ScalePPC 
M YY 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27/28 29 30 31 
Reserved ScaleSPE 
M vy 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59|60 61 62 63 
Bits Field Name Description 
0:27 Reserved Bits are not implemented; all bits read back zero. 
ScalePPC 
0 Disables ScalePPC 
aa ScalePRG 1 Enables throttling of scale time when the throttle temperature high is reached 
Setting both StopCore and Scale to 0 also disables the throttling feature. 
32:59 Reserved Bits are not implemented; all bits read back zero. 
ScaleSPE 
0 Disables ScaleSPE 
60:63 Seer 1 Enables throttling of scale time when the throttle temperature high is reached 
Setting both StopCore and Scale to 0 also disables the throttling feature. 
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11.6.17 Time Base Register (TBR) 
































Register Short Name TBR Privilege Type Privilege 1 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘509890’ Memory Map Area Pervasive: Thermal and Power 
BE_MMIO_Base Management 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register | Unit PRV 
Reserved 
J > 











O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Reserved Timebase_setting 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54/55/56 57 58 59 60 61 62 63 


< Timebase_mode 

















Bits Field Name Description 





0:54 Reserved Bits are not implemented; all bits read back zero. 





Time Base Mode 


: 0 Internal time base sync mode 
55 Timebase_mode f ee ‘ 
1 External time base sync mode. When this bit equals 1, the value of bits [55:63] has no 
effect. 





Time Base Setting 


Internal reference clock divider setting that is based on an LFSR. A setting of x‘00’ (the POR default 
value) indicates the LFSR is not counting. 


56:63 Timebase_setting 
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12. PowerPC Processor Element Special Purpose Registers 


This section describes special purpose registers (SPRs) used by the PowerPC Processor Element (PPE). 
These registers are read from using the mfspr PowerPC instruction or written to using the mtspr PowerPC 
instruction. Table 12-1 on page 288 shows the PPE SPR memory map and lists the PPE SPRs. 


Table 12-1 uses the following conventions: 


e Architected SPRs that do not contain implementation-specific information are included in Table 12-1 
but are not described in this manual. Table 12-1 provides cross references to additional information for 
each architected SPR. 


e Architected SPRs that contain implementation-specific information are included in Table 12-1 and are 
described in this section. When applicable, each register description provides specific cross references to 
additional information. The SPRs in the Decimal column are highlighted to indicate that an SPR is imple- 
mentation specific. 


Programming Note: Programmers should be aware that code using implementation-specific information 
is not guaranteed to be portable across different implementations of the architecture, although a signifi- 
cant effort is made to minimize incompatibilities between different designs. 


e The notes provided at the end of Table 12-1 describe unique and implementation-specific information for 
certain SPRs. 
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Table 12-1. PPE Special Purpose Registers (Page 1 of 5) 


































































































Synchronization f 
SPR SD g Requirements? i zl i 
SE = q Pie @ | Reset (POR) 
= % 8 Unit* z For Data For vi s = value 
g 2 BE 8 metrucions Ñ (All bits set to ‘0’ 
5 sprl5:9] spr[0:4| 3S Register Name (Short Name) £ Botore | After Before | Aner Read | wate | © | unless otherwise 
A e Cross Reference to Additional Information Writes | Writes | Writes | Writes | (mf) (mt) noted) 
Fixed-Point Exception Register (XER) _ _ 
91 0903090097 TOS e PowerPC User Instruction Set Architecture, Book | XU: IRAN WA ot 
Link Register (LR) 
og 00909 01999. ee Ne PowerPC User Instruction Set Architecture, Book | MD.) Ba NA 9 
Count Register (CTR) 
09 90909 GAON cdl PowerPC User Instruction Set Architecture, Book | oy a IRW NA s3 
Data Storage Interrupt Status Register (DSISR) : 
18 00900 19970: |08. 1; PowerPC Operating Environment Architecture, Book III XU: | RW NA hi 32 
Data Address Register (DAR) : 
i 00009490: | eS: PowerPC Operating Environment Architecture, Book III XUP: RW NA iii 64 
Decrementer Register (DEC) f : 
= 00009:19410; (Ra PowerPC Operating Environment Architecture, Book III MMU RAV Nong RY 92 Reeve 
Storage Description Register 1 (SDR1) PTE- PTE- 
= ee. ele PowerPC Operating Environment Architecture, Book III MMU ARAW sync esi sync = Hv 64 
Machine Status Save/Restore Register 0 (SRRO) . 
ae 00009:1100: : (lead PowerPC Operating Environment Architecture, Book III pe RA NA ny = 
Machine Status Save/Restore Register 1 (SRR1) A 
a POOO TIONN LeS PowerPC Operating Environment Architecture, Book III IU: RW NA i G 
Address Compare Control Register (ACCR) S 
29 ORROIT | eee PowerPC Operating Environment Architecture, Book III XU | RY csi None B e4 
136 00100 01000 Wo Control Register (CTRL) ib R N/A — N/A m 
152 | 00100 11000 e Section 12.1.1 Control Register (CTRL) on page 293 w None N/A | Priv? N/A 
e VXU Register Save (VRSAVE) 
256 | 01000 00000 | Yes |° See the PowerPC Microprocessor Family: Vector/SIMD Multimedia Extension Technology Programming XU | RW N/A — — 32 
Environments Manual 
a0. oios levas Software Use Special Purpose Register 3 (SPRG3) - Read Only xu | R NA = nia iea 
e PowerPC Operating Environment Architecture, Book III 
268 | 0100001100 Time Base Register (TB) sai 
e PowerPC Operating Environment Architecture, Book III 
The physical implementation of this register includes the following registers: 
No |e Time Base Register - Read Only (TB), SPR 268 MMU | R N/A = N/A 
269 — 01000 01101 * Time Base Upper Register - Read Only (TBU), SPR 269 32 
e Time Base Lower Register - Write Only (TBL), SPR 284 
e Time Base Upper Register - Write Only (TBU), SPR 285 
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Table 12-1. PPE Special Purpose Registers (Page 2 of 5) 








Synchronization 













































































SPR E : , Power-On 
SP 2 Requirements? Hypervisor/ @ | Reset (POR) 
88 : Privileged? | m 
= 5 2 Unit = For Data For 9 "ee: valug 
È | spr{S:9] sprio-4? 38 Register Name (Short Name) è se X Alois setio o 
3 5 5 3 A 
8 e=, cu Reference to Additional Information Œ Belore After Before After Read | write | P | Unless on 
Writes | Writes | Writes | Writes (mf) | (mt) noted) 
Soo dioooadooocil Yes Software Use Special Purpose Register 0 (SPRGO) <u] Aw NA TA 64 
e PowerPC Operating Environment Architecture, Book III 
Software Use Special Purpose Register 1 (SPRG1) ; 
ale 0100010001 ves e PowerPC Operating Environment Architecture, Book III XU: | RW NA Priv 64 
aN oaoot: Aves Software Use Special Purpose Register 2 (SPRG2) xu] Ow WA a a 
e PowerPC Operating Environment Architecture, Book III 
e ofododaort Fes Software Use Special Purpose Register 3 (SPRG3) xü ew NA RA aa 
e PowerPC Operating Environment Architecture, Book III 
284 | 91000 11100 Time Base Register (TB) 32 
e PowerPC Operating Environment Architecture, Book III 
The physical implementation of this register includes the following registers: 
No |e Time Base Register - Read Only (TB), SPR 268 MMU | W None N/A | HV N/A 
285 | 01000 11101 e Time Base Upper Register - Read Only (TBU), SPR 269 32 
e Time Base Lower Register - Write Only (TBL), SPR 284 
e Time Base Upper Register - Write Only (TBU), SPR 285 
at 000’ 
; ; 65 nm DD 1.1) 
PPE Processor Version Register (PVR) x‘0070_0501’ 
+ PowerPC Operating Environment Architecture, Book II! GOKE DD 32) 
287 | 0100011111 | No : l xU | R N/A Priv | NWA |32| (COKE ODS 
Note: The PVR is updated if the latch-to-latch path of the PPU is not logically and func- (10KE DD 3.0) 
tionally equivalent to the previous version (that is, if the unit is not Verity clean with the x'0070__0400’ 
previous version). (10KE DD 2.0) 
x E 
(10KE DD 1.0) 
304 | 0100110000 | Yes Hypervisor Software Use Special Purpose Register 0 (HSPRGO) x0 eo MA H 6A 
e PowerPC Operating Environment Architecture, Book III 
305 | 0100110001 | Yes Hypervisor Software Use Special Purpose Register 1 (HSPRG1) xu ew N/A HV eA 
e PowerPC Operating Environment Architecture, Book III 
Hypervisor Decrementer Register (HDEC)® : ; 
a A Ne is PowerPC Operating Environment Architecture, Book III MMU | RW Nong HY ae XC7EERIEPRE 
Real Mode Offset Register (RMOR) 
ee 71001 17000 eile Section 12.1.2 Real Mode Offset Register (RMOR) on page 295 MMU | RW çal None: | GSI HV 64 
Hypervisor Real Mode Offset Register (HRMOR)® 
a 71001 11001 None Section 12.1.3 Hypervisor Real Mode Offset Register (HRMOR) on page 296 MMU RAN es None: j OSI HY 94 
atnl odorar yss Hypervisor Machine Status Save/Restore Register 0 (HSRRO) w aw WA ay ea 











e PowerPC Operating Environment Architecture, Book III 
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Table 12-1. PPE Special Purpose Registers (Page 3 of 5) 








Synchronization 






















































































SPR re i , Power-On 
5? 2 Requirements? Myporisog @ | Reset (POR) 
. rivilege m 
= $ 8 Unit* = For Data For J Pa value 
z | $£ l © instructions Ñ  alibits set to © 
5 spr[5:9] spr[0:4] 42 Register Name (Short Name) £ Before | Ater | peel Aner Read | write Č | unless otherwise 
A e Cross Reference to Additional Information Writes | Writes | Writes | Writes | (mf) (mt) noted) 
ais | adorno | Yes Hypervisor Machine Status Save/Restore Register 1 (HSRR1 J8 w law NIA üv 6A 
e PowerPC Operating Environment Architecture, Book III 
Par- | Logical Partition Control Register (LPCR) intla | N iy š 
a 0000111110 | tia fe Section 12.1.4 Logical Partition Control Register (LPCR) on page 297 U paN va i | $ 
Logical Partition Identity Register (LPIDR}® 
MMU | R l l HV 2 
g 00nn Noi f Section 12.1.5 Logical Partition Identity Register (LPIDR) on page 298 ei eee sa i $ 
Thread Status Register Local (TSRL) 
R N | — — 4 
gag 1110000000 | Yes |, Section 12.1.6 Thread Status Register Local (TSRL) on page 299 a y S o3 . 
Thread Status Register Remote (TSRR) 
R N/A — N/A 4 
g 1110000001 | Yes |, Section 12.1.7 Thread Status Register Remote (TSRR) on page 301 s í í : 
Thread Switch Control Register (TSCR) 
R N | HV 4 
2 sae ae Nodi Section 12.1.8 Thread Switch Control Register (TSCR) on page 302 ad w i aa $ 
Thread Switch Timeout Register (TTR) 
R N | HV 4 
om to 1010 gl Section 12.1.9 Thread Switch Timeout Register (TTR) on page 304 s w rae e3 S 
PPE Translation Lookaside Buffer Index Hint Register (PPE_TLB_Index_Hint) 
946 | 1110110010 | Yes |e Section 12.1.10.1 PPE Translation Lookaside Buffer Index Hint Register (PPE_TLB_Index_Hint) on MMU R N/A Priv N/A | 64 
page 305 
PPE Translation Lookaside Buffer Index Register (PPE_TLB_Index) 9 
a 11101 10011 Noi Section 12.1.11 PPE Translation Lookaside Buffer Index Register (PPE_TLB_Index) on page 307 MMGA RAY nons = aa 
PPE Translation Lookaside Buffer Virtual-Page Number Register 
948 | 1110110100 | No (PPE_ TLB_VPN) f , ; , MMU RW | CSI CSI | None | CSI HV 64 
e Section 12.1.11.1 PPE Translation Lookaside Buffer Virtual-Page Number Register (PPE_TLB_VPN) on 
page 309 
PPE Translation Lookaside Buffer Real-Page Number Register 
949 | 11101 10101 | No (PPE_TLB_RPN) : A , MMU | RW None HV 64 
e Section 12.1.11.2 PPE Translation Lookaside Buffer Real-Page Number Register (PPE_TLB_RPN) on 
page 310 
PPE Translation Lookaside Buffer RMT Register (PPE_TLB_RMT) 
951 1110110111 | No Section 12.1.12 PPE Translation Lookaside Buffer RMT Register (PPE_TLB_RMT) on page 312 BE RAA SESI J SSI Nong: nes Hy: 64 
Data Range Start Register 0 (DRSRO) Syne, 
952 | 11101 11000 | Yes |e Range Start Register (RSR) in the Cell Broadband Engine Architecture XU | R/W | Sync | Ggjtd | None | None HV 64 
Data Range Mask Register 0 (DRMRO) Syne 
953 | 1110111001 | Yes |. Range Mask Register (RMR) in the Cell Broadband Engine Architecture XU_| RAW | Sync If osio: | None | None n e4 
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Table 12-1. PPE Special Purpose Registers (Page 4 of 5) 








Synchronization 







































































SPR o d R __ | _Power-On 
SE £ equirements® upaa T | Reset (POR) 
= ae Unit = For Data or oe z valug 
oO = instructions 
E | sprfs:9] sprfo-a?} £5 | Register Name (Sh g .N | (All bits set to ‘0’ 
: : ort Name i 
8 S=, Go Reference to pelle lla Œ Before After Before After Read | Write | ” saat s 
Writes | Writes | Writes | Writes (mf) | (mt) noted) 
Data Class ID Register 0 (DCIDRO) 
954 1110111010 | Yes |e Cell Broadband Engine Architecture XU | RW | Sync RA None | None HV 32 
e Section 12.1.13.1 Data Class ID Register 0 (DCIDRO) on page 313 
Data Range Start Register 1 (DRSR1) Syne, 
SS, ca ileal (Alaa Range Start Register (RSR) in the Cell Broadband Engine Architecture XU RON Syne i osit: | None. j. Nore ay > 
Data Range Mask Register 1 (DRMR1) Syne, 
a a a Range Mask Register (RMR) in the Cell Broadband Engine Architecture XU: j IRAN | Syne” | cgt: None: |i Nore oN = 
Data Class ID Register 1 (DCIDR1) Syne 
957 | 1110111101 Yes |. Section 12.1.13.2 Data Class ID Register 1 (DCIDR1) on page 314 XU IRAN Syne: (0:8 asia j Nonie Hy ae 
Instruction Range Start Register 0 (IRSRO) Syne 
7 
S ee ele Range Start Register (RSR) in the Cell Broadband Engine Architecture U y RAN i None: (steel Synce: csi g as 
Instruction Range Mask Register 0 (IRMRO Sync 
SEEN INTO NOOO | ee Range Mask Register (RMR) in the register ot Engine ciechi U: JIRAW hss | None Vaz aca e's) Hy o4 
Instruction Class ID Register 0 (ICIDRO) Syne, 
978 | 11110 1001 Y 
9040 eS e Section 12.1.14.1 Instruction Class ID Register 0 (ICIDR0) on page 315 H. RAV -None AOE Syne- ees a <= 
Instruction Range Start Register 1 (IRSR1) Sync. 
979 | 1111010011 | Yes |. Range Start Register (RSR) in the Cell Broadband Engine Architecture U | R/W | None | None | Syne | ogy RN oa 
Instruction Range Mask Register 1 (IRMR1) Syne. 
9 
Po (cel XSS Range Mask Register (RMR) in the Cell Broadband Engine Architecture U. RAN f None: None: | Syne: | CS] ay 94 
Instruction Class ID Register 1 (ICIDR1) Sync. 
981 | 1111010101 | Yes |. Section 12.1.14.2 Instruction Class ID Register 1 (ICIDR1) on page 316 U | RW | None | None | Syne | Gg; AV 32 
Hardware Implementation Register 0 (HIDO) S S 
10 111111 N yng ng 
oe ooa ° e Section 12.1.15 Hardware Implementation Register 0 (HIDO) on page 317 U RA y Sye GSi di SY00 -CSI ay ši 
Hardware Implementation Register 1 (HID1) S S 
10 1111110001 | N yng ne 
os men ° e Section 12.1.16 Hardware Implementation Register 1 (HID1) on page 320 U: i RA Sn sp0. ye | cS] ay = 
Hardware Implementation Register 4 (HID4) S S 
1012 | 11111 101 N yng ne 
: ome ° e Section 12.1.17 Hardware Implementation Register 4 (HID4) on page 324 XU: IRA | RARE I eee || Syne | ey wy i 
Data Address Breakpoint Register (DABR) 
101 11111 10101 | Y 
3 me es, PowerPC Operating Environment Architecture, Book III AUK MRAV epi ol Nons HN bat 
Data Address Breakpoint Register Extension (DABRX) 
101 11111 10111 | Y 
E o s PowerPC Operating Environment Architecture, Book III | Syg GSI Nons i sa 
1017| 1111111001 | No Hardware Implementation Register 6 (HID6) MMU | RW | Syne Sng Sync Syne HV 64 











e Section 12.1.18 Hardware Implementation Register 6 (HID6) on page 327 
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SPR Synchronization Power-On 
= o i ; ae 
ge 2 Requirements Hypervisor/ @ | Reset (POR) 
= E 2 Unit* = For Data For ae = Value 
£ sosial Se ' 7 sla Ñ | (Al bits set to © 
5 spr[5:9] spr[0:4] Az Register Name (Short Name) È Botorel Ater |Batore) Aner Read | write | © | unless otherwise 
a e Cross Reference to Additional Information Writes | Writes | Writes | Writes | (mf) (mt) noted) 
NA NIA Yes Machine State Register (MSR) u | BAW NA Biv _ 


e Section 12.2.1 Machine State Register (MSR) on page 331 


suibuy pueqpeoig Ilə9 





CBEA-Compliant Processor Version Register (BP_VR) 
1022 | 1111111110 | No « Section 12.1.19 CBEA-Compliant Processor Version Register (BP_VR) on page 329 XU R N/A Priv | N/A | 64 
e Cell Broadband Engine Architecture 





Processor Identification Register (PIR) xU 7 ik Biv. || SRA. | a8 


See 
1023 1111111111 | Yes | Section 12.1.20 Processor Identification Register (PIR) on page 330 Section 12,120 






































=k 


. Implementation-specific SPRs are highlighted. 

. The order of the two 5-bit halves of the SPR number is reversed (to follow the convention of the architecture documents). 

3. Any register that is not duplicated per thread requires special care by the hypervisor when written. The hypervisor must not cause an implicit branch or undefined behavior 
for the thread that is not writing the register. 

4. The unit notation is execution unit (XU), instruction unit (IU), memory management unit (MMU). 

5. For more information, see the synchronization requirements for context alterations section of the PowerPC Operating Environment Architecture, Book III. 

e “N/A” indicates that the operation does not apply to this register. 

“None” indicates that no synchronization is required. 
e “Sync” refers to the lightweight syne L = 1 instruction unless otherwise indicated. 
e “CSI” stands for context-synchronizing instruction. 

6. Explanation of the Hypervisor/Privileged column: 

e HV: Indicates that the register is a hypervisor resource. The hypervisor state must be enabled (MSR[HV] = ‘1’) to write this register. Attempts to modify the contents of a 
hypervisor resource (such as using the move-to SPR instruction) in privileged but nonhypervisor state (MSR[HV, PR] = ‘00’) cause a privileged-instruction program 
interrupt. 

Priv: Indicates that the register is privileged. The privileged state must be enabled (MSR[PR] = ‘0’) to read or write to the register. Attempts to access the contents of a 
privileged resource (such as using the move-to SPR or move-from SPR instruction) in nonprivileged state (MSR[PR] = ‘1’) cause a privileged-instruction program inter- 
rupt. 
— Indicates that the register is neither privileged nor a hypervisor resource. 
N/A: Indicates that the register is either read-only or write-only. 
— Writes using move-to instructions to unimplemented SPRs are treated as nop instructions. Architected registers are not changed. 
— Writes using move-to instructions to read-only SPRs are treated like unimplemented SPRs. 
— Reads using move-from instructions from unimplemented SPRs cause zeros to be written back to the general purpose register (GPR). 
— Reads using move-from instructions from write-only SPRs are treated like unimplemented SPRs. 
7. The Thread Enable Bits field of CTRL can be modified only in hypervisor mode. Attempts to modify the Thread Enable Bits field of the CTRL Register (using the move-to 
SPR instruction) while not in hypervisor mode (MSR[HV] = ‘0’) are ignored. 
8. These registers are for logical partitioning (LPAR) support. 
9. Reading of these registers is allowed for diagnostic purposes. 
10. Indicates a sync instruction followed by any context-synchronizing instruction. 
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Cell Broadband Engine 
12.1 SPR Definitions 


This section describes the implementation-specific special purpose registers (SPRs) used in this 


implementation. For a complete listing of SPRs, see Table 12-1 PPE Special Purpose Registers on 
page 288. 


Notes: 


The following information applies to the tables used at the beginning of each register description in this 
section. 


1. In this section, power-on reset (POR) is defined as the sequence that starts when power is first applied to 
the chip and ends when the load function is complete. 


2. Value at Initial POR is the value that was initialized during the scan initialization or configuration ring part 
of the POR sequence. 


3. Some fields within the architected registers are not physically implemented. Writing to these fields has no 
effect, and reading from these fields returns ‘0’. These fields are marked Reserved. The Rsvd_l bits are 
reserved and implemented. Writes to Rsvd_l bits are preserved on a read. 


12.1.1 Control Register (CTRL) 









































Register Short Name CTRL Privilege Type Read: Not privileged 
Write: Privileged 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 136 (Read) Register Duplicated for No 
152 (Write) Multithreading? 
Value at Initial POR All bits set to zero Value During POR Set By Scan Initialization 
Specification Type PowerPC architected register Unit IU 
TE 
on Zz 
CT Reserved ti Reserved TH Reserved r 
Yvy Yy Vy yy Vy y 
O 1/12 3 4 5 6 7/8 9 |10 11 12 13 14 15/16 17/18 19 20 21 22 23 24 25 26 27 28 29 30) 31 
































Bits Field Name Description 








Current thread active (Read Only) 


These read-only bits contain the current thread bits for threads 0 and 1. Software can read these 
bits to determine on which thread they are operating. Only one current thread bit is set at a time. 
0:1 CT 00 Reserved 


01 Thread 1 is reading CTRL. 
10 Thread 0 is reading CTRL. 
11 Reserved 





2:7 Reserved Bits are not implemented; all bits read back zero. 
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Bits Field Name Description 
Thread enable bits (Read/Write) 
The hypervisor state can suspend its own thread by setting the TE bit for its thread to '0’. The hyper- 
visor state can resume the opposite thread by setting the TE bit for the opposite thread to '1'. The 
hypervisor state cannot suspend the opposite thread by setting the TE bit for the opposite thread to 
‘0’. This setting is ignored and does not cause an error. 
TEO is the Thread Enable bit for thread 0. 
TE1 is the Thread Enable bit for thread 1. 
If thread 0 executes the mtctrl instruction, these are the bit values: 
[TEO, TE1] Description 
00 Disable or suspend thread 0; thread 1 unchanged. 
8:9 TE 01 Disable or suspend thread 0; enable or resume thread 1 if it was disabled. 
10 Unchanged. 
11 Enable or resume thread 1 if it was disabled. 
If thread 1 executes the mtctrl instruction, these are the bit values: 
[TEO, TE1] Description 
00 Thread 0 unchanged; disable or suspend thread 1. 
01 Unchanged. 
10 Enable or resume thread 0 if it was disabled; disable or suspend thread 1. 
11 Enable or resume thread 0 if it was disabled. 
Note: Software should not disable a thread when in trace mode (MSR[SE] or MSR[BE] set to ‘1’). 
Doing so causes SRRO to be undefined and can cause a system livelock hang condition. 
10:15 Reserved Bits are not implemented; all bits read back zero. 
Thread history 
If thread A writes CTRL[RUN], then CTRL[16] is set; otherwise, if thread B writes CTRL[31], then 
16:17 TH CTRL[17] is set. 
These bits cannot be set directly by writing bits [16] or [17] with an mtctrl instruction. They are only 
set when a thread writes CTRL[RUN]. 
18:30 Reserved Bits are not implemented; all bits read back zero. 
31 RUN Run state bit. 











Additional Information: 


e For additional information, see PowerPC Operating Environment Architecture, Book III. 
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12.1.2 Real Mode Offset Register (RMOR) 






































Register Short Name RMOR Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 312 Register Duplicated for No 
Multithreading? 

Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type PowerPC architected register Unit MMU 

Reserved RMO 
y 4 4 > 








012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 








RMO Reserved 


vy y 
32 33 34 35 36 37 38 39 40 41 42 43|44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 




















Bits Field Name Description 








0:21 Reserved Bits are not implemented; all bits read back zero. 





Real-mode offset 


28:43 RMO The offset from x‘0’ at which real-mode memory begins. 














44:63 Reserved Bits are not implemented; all bits read back zero. 





Additional Information: 
e For additional information, see PowerPC Operating Environment Architecture, Book III. 
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12.1.3 Hypervisor Real Mode Offset Register (HRMOR) 
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SONY 


SOMARI 











Multithreading? 


Register Short Name HRMOR Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 313 Register Duplicated for No 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 






































Specification Type PowerPC architected register Unit MMU 
Reserved HRMO 
> 
+y 
012 3 4 5 6 7 8 9 10 11 12/13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
HRMO Reserved 
< 





vy 


4 





32 33 34 35 36 37 38 39 40 41 42 43 





44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 





























Bits Field Name Description 
0:21 Reserved Bits are not implemented; all bits read back zero. 
Hypervisor real-mode offset 
: RM . 
ee Me The offset from x‘0’ at which hypervisor real-mode memory begins. 
44:63 Reserved Bits are not implemented; all bits read back zero. 








Additional Information: 


e For additional information, see PowerPC Operating Environment Architecture, Book III. 
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12.1.4 Logical Partition Control Register (LPCR) 


Registers 
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Multithreading? 


Register Short Name LPCR Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 318 Register Duplicated for Partially 


(See notes in the bit definitions 
below.) 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 





Specification Type 








PowerPC architected register Unit 





MMU 








Reserved 








012 3 4 5 6 7 





8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Reserved 


RMLS 


Reserved 








“Ty + + ¥ 


<— MER 


y 


LPES 


Reserved 





t y 





32 33/34 35 36 37/38 39 








40 41 42 43 44 45 46 47 48 49 50 51|52 








gje TL 


54 55 56 57 58 59|60 61 





Q «— RMI 
2 «— HDICE 















































Bits Field Name Description 
0:33 Reserved Bits are not implemented; all bits read back zero. 
Real-mode limit selector 
ska RMES Both threads share this field. 
38:51 Reserved Bits are not implemented; all bits read back zero. 
52 MER Mediate external exception request (interrupt enable) 
This field is duplicated per thread. 
Translation lookaside buffer (TLB) load 
53 TL Both threads share this field. 
(0) TLB is loaded by hardware. 
1 TLB is loaded by software. 
54:59 Reserved Bits are not implemented; all bits read back zero. 
, Logical partitioning (environment selector) 
60:61 EFES Both threads share this field. 
62 RMI Real-mode caching (caching inhibited) 
This field is duplicated per thread. 
Hypervisor decrementer interrupt control enable 
HDICE 
G This field is duplicated per thread. 











Programming Note: Mediated external interrupts are not yet defined in PowerPC Operating Environment 
Architecture, Book III. This facility is a proposed extension that is expected to be made part of the architec- 


ture. 


Additional Information: 


e For additional information, see PowerPC Operating Environment Architecture, Book III. 
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12.1.5 Logical Partition Identity Register (LPIDR) 
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Multithreading? 


Register Short Name LPIDR Privilege Type Hypervisor 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 319 Register Duplicated for No 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 


























Specification Type PowerPC architected register Unit MMU 
Reserved LPID 
vy v 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26|27 28 29 30 31 


























Bits Field Name Description 
0:26 Reserved Bits are not implemented; all bits read back zero. 
27:31 LPID Logical partition ID 





Additional Information: 


e For additional information, see PowerPC Operating Environment Architecture, Book III. 


Programming Note: 


e TLB entries are tagged with the LPID when they are created. Therefore, the TLB does not need to be 
invalidated on a partition context switch. 
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12.1.6 Thread Status Register Local (TSRL) 
This register allows a thread to read its own status. 


Each thread has a Thread Status Register (TSR). When a thread reads its own TSR, this register is called the 
Thread Status Register Local (TSRL). When a thread reads the TSR for the other thread, this register is 
called the Thread Status Register Remote (TSRR). 



































Register Short Name TSRL Privilege Type Not Privileged 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 896 Register Duplicated for Yes 
Multithreading? 

Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register Unit IU 

Reserved TP Reserved 
4 vy Vy i 





012 3 4 5 6 7 8 9 10/11 12/13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 














Reserved FWDP 


< oe y 
32 33 34 35 36 37 38 39 40 41 42 43|44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 




















Bits Field Name Description 


0:10 Reserved Bits are not implemented; all bits read back zero. 





Thread priority (read/write) 
00 Disabled 


01 Low priority 
10 Medium priority 
11 High priority (If a system reset interrupt is taken, this field is set to ‘11’.) 


A thread cannot disable itself by attempting to directly set the TP field to ‘00’ (an attempt to do so is 
ignored). The thread must be disabled by setting the CTRL Register appropriately. 


The Thread Status Control Register (TSCR) controls which thread priorities can be selected. 
When in problem state (MSR[PR] = ‘1’), the following thread priorities are available: 

e If TSCR[UCP] is set to ‘0’, the priority cannot be changed. 

e If TSCR[UCP] is set to ‘1’, the priority can be set to low or medium. 


When in privileged but nonhypervisor state (MSR[HV,PR] = ‘00’), the following thread priorities are 
available: 


e If TSCR[UCP, PSCTP] is set to ‘00’, the priority cannot be changed. 

e If TSCR[UCP, PSCTP] is set to ‘10’, the priority can be set to low or medium. 

e If TSCR[PSCTP] is set to ‘1’, the priority can be set to low, medium, or high. 
When in hypervisor state (MSR[HV, PR] = ‘10’), the priority can be set to low, medium, or high. 
Note: Attempts to set the TP field illegally are ignored, and the priority does not change. 


11:12 TP 














13:43 Reserved Bits are not implemented; all bits read back zero. 
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Bits Field Name Description 
Forward progress timer (Read Only) 
This field is loaded from TTR[TTIM] each time the current thread completes a PowerPC Architec- 
ture instruction. This resets the timer to the maximum count. If the current thread is not disabled 
(TSRL[TP] = ‘00’), this field is decremented by one each time an instruction completes on the oppo- 
site thread. 
44:63 FWDP 





If TSCR[FPCF] = ‘1’ and the timer reaches x‘00001’, then after the next instruction completes, 
instructions for the opposite thread are flushed and no dispatch slots are given to the opposite 
thread until one instruction completes on the current thread. 


This field stops decrementing at x‘00001’ (the minimum count). 
This field is Initialized at POR to x‘00000’ (the maximum count). 








Related Registers: Section 12.1.7 Thread Status Register Remote (TSRR) on page 301 
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12.1.7 Thread Status Register Remote (TSRR) 
This register allows a thread to read the status of the other thread. 


Each thread has a TSR. When a thread reads its own TSR, this register is called the Thread Status Register 
Local (TSRL). When a thread reads the TSR of the other thread, this register is called the Thread Status 
Register Remote (TSRR). 



































Register Short Name TSRR Privilege Type Not Privileged 
Access Type SPR Read Only Width 64 bits 
Decimal SPR Number 897 Register Duplicated for Yes 
Multithreading? 

Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register Unit IU 

Reserved TP Reserved 
4 Vy vy i 





012 3 4 5 6 7 8 9 10/11 12/13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 














Reserved FWDP 


< 4y y 
32 33 34 35 36 37 38 39 40 41 42 43|44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 

















Bits Field Name Description 





0:10 Reserved Bits are not implemented; all bits read back zero. 





Thread priority. 
Shows the thread priority of the opposite thread. 
00 Disabled 





tiig TE 01 Low priority 
10 Medium priority 
11 High priority 
13:43 Reserved Bits are not implemented; all bits read back zero. 


Forward progress timer 


44:63 FWDP Shows the counter value of the forward progress timer for the opposite thread. See the 
TSRL[FWDP] field description. 

















Related Registers: Section 12.1.6 Thread Status Register Local (TSRL) on page 299 
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Multithreading? 


Register Short Name TSCR Privilege Type Hypervisor 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 921 Register Duplicated for No 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 


































































































Specification Type Implementation-specific register Unit IU 
ont ao Eo ao 
i td x S626 0 
DISP_CNT Rvd ā 222% 2 9 Rsv Reserved 
y yy ee ee ee ee E E 4 
O 1 2 3 445 6 7 89 }10)11)12)13)14)15)16)17 18 19/20 21 22 23 24 25 26 27 28 29 30 31 
Bits Field Name Description 
Thread dispatch count 
0:4 DISP CNT Used to control the number of dispatch cycles each thread is given, based on the priority of the 
i ~ thread. A DISP_CNT of ‘00000’ equals 32, which is the maximum dispatch count. During normal 
operation, this field should be set to 4. 
5:8 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Decrementer wakeup enable for thread 0 
9 WDECO (0) Disabled l l l l l 
1 If a decrementer exception exists and the corresponding thread is suspended, the thread is 
activated. 
Decrementer wakeup enable for thread 1 
10 WDEC1 0 Disabled l l l l l 
1 If a decrementer exception exists and the corresponding thread is suspended, the thread is 
activated. 
External interrupt wakeup enable 
11 WEXT (0) Disabled l l 
1 If an external interrupt exception exists and the corresponding thread is suspended, the 
thread is activated. 
Thread priority boost enable 
0 Disabled 
1 If a system-caused interrupt exception is presented, the corresponding interrupt is not 
12 PBUMP masked, and the priority of the corresponding thread is less than medium, sets the priority 
of the thread to medium. 
The hardware internally boosts the priority level to medium when the interrupt is pending. This does 
not change the value in the TSRL[TP] bits for the affected thread. The internal priority remains 
boosted to medium until an mttsrl or a priority-changing nop instruction occurs. 
Forward progress count flush enable 
13 FPCF Note: This bit only enables or disables the flush from occurring. The forward progress timer does 
not stop decrementing when set to zero. During normal operation, this bit should be set to '1'. 
14 Rsvd_| Reserved. Latch bit is implemented; the value read is the value written. 
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Bits Field Name Description 
Privileged but not hypervisor state change thread priority enable 
Enables the privileged but not the hypervisor state (MSR[HV,PR] = ‘00’) to change priority with “or 
15 PSCTP Rx, Rx, Rx” nop instructions or with writes to TSRL[TP]. 
0 The ability of the privileged state to change thread priority is determined by TSCR[UCP]. 
1 The privileged state can change thread priority to low, medium, or high. 
Problem state change thread priority enable 
Enables the problem state to change priority with “or Rx, Rx, Rx” nop instructions or writes to 
16 UCP TSRL[TP]. 
0 The problem state cannot change thread priority. 
1 The problem state can change thread priority to low or medium only. 
17:19 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
20:31 Reserved Bits are not implemented; all bits read back zero. 
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12.1.9 Thread Switch Timeout Register (TTR) 


This register is used to ensure forward progress of the instruction dispatch. 






































Register Short Name TTR Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 922 Register Duplicated for No 
Multithreading? 
Value at Initial POR All bits set to zero Value During POR Set By | Scan initialization during POR 
Specification Type Implementation-specific register Unit IU 
Reserved 
4 > 





[o 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 





Reserved TTIM 


< 
vy 4 
32 33 34 35 36 37 38 39 40 41 42 43|44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 

















Bits Field Name Description 








0:43 Reserved Bits are not implemented; all bits read back zero. 





Thread timeout flush value 


A value of x‘00000’ generates the maximum count. See the description of TSRL[FWDP]. The rec- 
ommended value for this field is x‘04000’. This setting, along with the TSCR[FPCF] set to ‘1’, is nec- 
44:63 TTIM essary to guarantee that a forward progress timeout does not occur because one thread prevents 
the other from completing instructions. If one thread executes 16 K instructions without the other 
thread completing one instruction, then the first thread is blocked even if it has higher priority. The 
second thread gets full resources to execute an instruction. 
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12.1.10 Translation Lookaside Buffer Special Purpose Registers 


This section describes the TLB special purpose registers (SPRs). 


12.1.10.1 PPE Translation Lookaside Buffer Index Hint Register (PPE_TLB_Index_Hint) 


Hardware updates this register when a TLB miss occurs with LPCR[TL] set to ‘1’ (Software tablewalk mode). 



































Register Short Name PPE_TLB_Index_Hint Privilege Type Read: Privileged 
Access Type SPR Read Only Width 64 bits 
Decimal SPR Number 946 Register Duplicated for Yes 
Multithreading? 
Value at Initial POR All bits set to zero Value During POR Set By | Scan initialization during POR 
Specification Type Implementation-specific register Unit MMU 
Reserved 
J > 





012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 








Reserved TIH TSH 


p 4y vy v 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51/52 53 54 55 56 57 58 59/60 61 62 63 
































Bits Field Name Description 
0:51 Reserved Bits are not implemented; all bits read back zero. 
PPE TLB index hint 
52:59 TIH The index (congruence class) of the TLB that the hardware least recently used (LRU) facility would 
have chosen to replace if hardware TLB updates were enabled (LPCR[TL] = ‘0’). 
TLB set hint 


The recommended set for replacement (software replaces entries in the correct order to maintain 
the LRU). Valid values are: 


60:63 TSH 1000 Seto 
0100 Seti 
0010 Set2 
0001 Set3 

















Programming Note: 
e The PPE_TLB_Index_Hint Register is separate from the PPE_TLB_Index to avoid the possibility of hard- 
ware changing the index due to a fault while software is updating a TLB entry. 


e This implementation supports a 256 x 4 TLB array. Hence, 8 fully encoded bits [52:59] are used to 
choose among the 256 rows (or congruence classes) of the TLB. Four fully decoded bits [60:63] are used 
to choose among the four columns (or sets). 


e The effective address that caused the TLB miss that led to this register being set can be determined from 
the Data Address Register (DAR). 
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Related Registers: Section 12.1.11 PPE Translation Lookaside Buffer Index Register (PPE_TLB_Index) on 
page 307 


Additional Information: 
e For additional information, see the Cell Broadband Engine Architecture document. 
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12.1.11 PPE Translation Lookaside Buffer Index Register (PPE_TLB_Index) 


This register is readable for diagnostic purposes only. 



































Register Short Name PPE_TLB_Index Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 947 Register Duplicated for No 
Multithreading? 

Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register Unit MMU 

Reserved LVPN Reserved 
v vy an > 





[o 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15/16 17 18|19 20 21 22 23 24 25 26 27 28 29 30 31 





Reserved Tl TS 


vy vy 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51/52 53 54 55 56 57 58 59/60 61 62 63 


< 

















Bits Field Name Description 








0:15 Reserved Bits are not implemented; all bits read back zero. 





Lower virtual page number 

LVPN[0:2] corresponds to VPN[57:59]. 

16:18 LVPN Note: The abbreviated virtual page number (AVPN)[0:56] corresponds to VPN[0:56]. The 
VPN corresponds to AVPN concatenated with LVPN. The PowerPC processor unit (PPU) only 
implements LVPN[0:2], because the TI field of this register implies LVPN[3:12 — p]. 


19:51 Reserved Bits are not implemented; all bits read back zero. 





PPE TLB index 
The fully encoded index of the TLB chosen for replacement. 


TLB set 

The set chosen for replacement. 

The following are valid set combinations: 
1000 Seto 

60:63 TS 0100 Seti 

0010 Set2 

0001 Set3 


Setting multiple bits causes multiple sets in the TLB to be written with identical data. This is not rec- 
ommended because it makes inefficient use of the TLB. 


52:59 TI 

















Programming Note: 
e This implementation supports a 256 x 4 TLB array. Hence, 8 fully encoded bits [52:59] are used to 
choose among the 256 rows (or congruence classes) of the TLB. Four fully decoded bits [60:63] are used 
to choose among the four columns (or sets). 


e This register is read by the memory management unit (MMU) hardware when an mtspr or mfspr instruc- 
tion is executed with a target address of either the PPE_TLB_VPN or PPE_TLB_RPN. This tells the 
MMU which entry of the TLB software it should update. Software writes to this register to indicate which 
entry it wants to replace. The register is also readable for debug purposes. Subsequent writes to the 
PPE_TLB_VPN and PPE_TLB_RPN are based on the last value written to this register. 
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Related Registers: Section 12.1.10.1 PPE Translation Lookaside Buffer Index Hint Register 
(PPE_TLB_Index_Hint) on page 305 


Additional Information: 
e For additional information, see the Cell Broadband Engine Architecture document. 
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12.1.11.1 PPE Translation Lookaside Buffer Virtual-Page Number Register (PPE_TLB_VPN) 





















































Register Short Name PPE_TLB_VPN Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 948 Register Duplicated for No 
Multithreading? 
Value at Initial POR All bits set to zero Value During POR Set By = Scan initialization during POR 
Specification Type Implementation-specific register Unit MMU 
Reserved AVPN 
> 
v vy 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14/15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
xe} 
o 
2 
2 
AVPN Reserved Lev 
< 
v y ty 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56/57 58 59 60] 61/62/63 




















Bits Field Name Description 








0:14 Reserved Bits are not implemented; all bits read back zero. 





Abbreviated virtual page number 

The AVPN corresponds to VPN[15:56]. 

15:56 AVPN For a description of the AVPN, see PowerPC Operating Environment Architecture, Book III. 

Note: When reading a 16 MB TLB entry, bit [56] of the AVPN is undefined. Software should ignore 
it. 





57:60 Reserved Bits are not implemented; all bits read back zero. 





Large-page mode 








61 L (0) 4 KB page 
1 Large page 

62 Reserved Bits are not implemented; all bits read back zero. 
Valid bit 

63 V (0) Invalid 
1 Valid 

















Programming Note: 
e If the VPN is being invalidated to change the protection attributes of a page or to steal the page, a TLB 
invalidate entry command must be issued to invalidate any cache of the effective-to-real-address transla- 
tion that might be associated with the TLB entry being invalidated. 


e This register acts as a placeholder for the TLB entry pointed to by PPE_TLB_Index. Changing the value 
of PPE_TLB_Index implicitly changes the value of this register to match the contents of the 
corresponding TLB array entry pointed to by PPE_TLB_Index. 


e This register is meant to be written as part of a sequence of instructions. 


Additional Information: 
e For additional information, see the Cell Broadband Engine Architecture document. 
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12.1.11.2 PPE Translation Lookaside Buffer Real-Page Number Register (PPE_TLB_RPN) 











Register Short Name PPE_TLB_RPN Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 949 Register Duplicated for No 


Multithreading? 





Value at Initial POR 


All bits set to zero 


Value During POR Set By |Scan initialization during POR 























































































































Specification Type Implementation-specific register Unit MMU 
Reserved ARPN 
> 
v vy 
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21/22 23 24 25 26 27 28 29 30 31 
ne) 
o 
2 
2 - N 
ARPN ce ACR CWIMGNGE & 
< 
4 Ere RENN 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50/51/52 53 63 
Bits Field Name Description 
0:21 Reserved Bits are not implemented; all bits read back zero. 
Abbreviated real page number 
22:50 ARPN The ARPN corresponds to RPN[22:50]. 
To obtain the full 30-bit RPN, the ARPN is combined with the LP field. 
Large page size selector 

54 LP If PPE_TLB_VPNJL] is set to ‘1’, then bit [51] is used as the page size selector (see HID6[LB] in 
Section 12.1.18 Hardware Implementation Register 6 (HID6) on page 327). Otherwise, bit [51] cor- 
responds to RPN[51]. 

52:53 Reserved Bits are not implemented; all bits read back zero. 

54 AC Address compare 

55 R Reference 
The implementation always treats this bit as ‘1’. Any attempt to set it to ‘0’ is ignored. 

56 C Change 

b7 w Write-through 
This bit is forced to ‘0’ in this implementation. 

58 l Caching inhibited 
Memory coherency bit 
Memory is always coherent on this processor. Therefore, this value is forced to ‘1’. 

59 M Note: Reference and Change bit updates are done with M = ‘1’. Software should not set the page 
table entry (PTE) M bit to ‘0’ because it might be implicitly overwritten by a Reference or Change bit 
update. 

60 G Guarded 
No execute 

61 N 0 Execute page 
1 No-execute page 

62 PP1 Page-Protection bit 1 for tags inactive mode 
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Bits Field Name Description 








63 PP2 Page-Protection bit 2 for tags inactive mode 

















Programming Note: 
e This implementation supports two concurrent large page sizes. The LP field controls the selection 

between the two large page sizes when the L bit is set in the PPE_TLB_VPN Register. The address of 
the real page (that is, the real page number or RPN) is formed by concatenating the ARPN field with a 
zero when the L bit is set. Because the RPN must be on a page size boundary, software must set some 
low-order bits to zero when L is set or the results are undefined. For 64 KB, 1 MB, and 16 MB pages, the 
low-order 4, 8, and 12 bits of the RPN respectively are zero. If the L bit is not set in the PPE_TLB_VPN, 
the RPN is formed by concatenating the ARPN with the LP field, and the page size is 4 KB. 


e This register acts as a placeholder for the TLB entry pointed to by PPE_TLB_Index. Changing the value 
of PPE_TLB_Index implicitly changes the value of this register to match the contents of the correspond- 
ing TLB array entry pointed to by PPE_TLB_Index. 


e This register is meant to be written as part of a sequence of instructions. 


Additional Information: 
e For additional information, see Cell Broadband Engine Architecture document. 
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Register Short Name PPE_TLB_RMT Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 951 Register Duplicated for No 


Multithreading? 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 








































































































Specification Type Implementation-specific register Unit MMU 
Reserved 
4 
0O 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
RMTO RMT1 RMT2 RMT3 RMT4 RMT5 RMT6 RMT7 

4 vy vy vv vv vv vv vv 4 
32 33 34 35/36 37 38 39/40 41 42 43|44 45 46 47/48 49 50 51/52 53 54 55/56 57 58 59/60 61 62 63 

Bits Field Name Description 

0:31 Reserved Bits are not implemented; all bits read back zero. 

32:35 RMTO Entry 0 of the replacement management table (RMT) 

36:39 RMT1 Entry 1 of the RMT 

40:43 RMT2 Entry 2 of the RMT 

44:47 RMT3 Entry 3 of the RMT 

48:51 RMT4 Entry 4 of the RMT 

52:55 RMT5 Entry 5 of the RMT 

56:59 RMT6 Entry 6 of the RMT 

60:63 RMT7 Entry 7 of the RMT 

















Programming Note: 


e Each RMT entry consists of 4 bits, which are fully decoded and correspond to a set in the TLB. If an effec- 
tive address matches a range register, then the TLB considers the corresponding RMT entry for this 
range when replacing entries in the TLB. Each bit of the RMT entry can be thought of as a set enabler. 
When a bit is set to ‘1’, it indicates that the corresponding set of the TLB is a valid entry to replace if the 
translation requires a TLB update to occur (for example, when the translation page table entry does not 
currently reside in the TLB). If multiple sets are indicated, they are replaced in priority order, beginning 
with invalid entries first, and then proceeding with valid entries from left to right. 


Additional Information: 


e For additional information, see the Cell Broadband Engine Architecture document. 
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12.1.13 Data Range SPRs 


12.1.13.1 Data Class ID Register 0 (DCIDRO) 




































































Register Short Name DCIDRO Privilege Type Hypervisor 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 954 Register Duplicated for Yes 
Multithreading? Each thread has a DCIDRO and 
a DCIDR1. 
Value at Initial POR All bits set to zero Value During POR Set By Scan initialization during POR 
Specification Type Implementation-specific register Unit XU 
Reserved Rsvd_| Reserved RclassID 
v 4 y vv 4 y 4 
012 3 4 5 6 7 8 9 10 11 12/13 14 15/16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 
Bits Field Name Description 
0:12 Reserved Bits are not implemented; all bits read back zero. 
13:15 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
16:28 Reserved Bits are not implemented; all bits read back zero. 
29:31 RclassID Replacement class identifier 
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12.1.13.2 Data Class ID Register 1 (DCIDR1) 


SONY 
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Multithreading? 


Register Short Name DCIDR1 Privilege Type Hypervisor 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 957 Register Duplicated for Yes 


Each thread has a DCIDRO and 
a DCIDR1. 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 

































































Specification Type Implementation-specific register Unit XU 
Reserved Rsvd_l Reserved RclassID 

v vv vv vy 4 
O 1 2 3 4 5 6 7 8 9 10 11 12/13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 

Bits Field Name Description 

0:12 Reserved Bits are not implemented; all bits read back zero. 

13:15 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 

16:28 Reserved Bits are not implemented; all bits read back zero. 

29:31 RclassID Replacement class identifier 
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12.1.14 Instruction Range SPRs 


12.1.14.1 Instruction Class ID Register 0 (ICIDRO) 
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Multithreading? 


Register Short Name ICIDRO Privilege Type Hypervisor 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 978 Register Duplicated for Yes 


Each thread has an ICIDRO and 
an ICIDR1. 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 







































































Specification Type Implementation-specific register Unit IU 
Reserved Rsvd_l Reserved RclassID 
v vv vv ¥ v 4 
O 1 2 3 4 5 6 7 8 9 10 11 12/13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 
Bits Field Name Description 
0:12 Reserved Bits are not implemented; all bits read back zero. 
13:15 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
16:28 Reserved Bits are not implemented; all bits read back zero. 
29:31 RclassID Replacement class identifier 
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12.1.14.2 Instruction Class ID Register 1 (ICIDR1) 
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Multithreading? 


Register Short Name ICIDR1 Privilege Type Hypervisor 
Access Type SPR Read/Write Width 32 bits 
Decimal SPR Number 981 Register Duplicated for Yes 


Each thread has an ICIDRO and 
an ICIDR1. 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 

































































Specification Type Implementation-specific register Unit IU 
Reserved Rsvd_l Reserved RclassID 

v vv vv vy 4 
O 1 2 3 4 5 6 7 8 9 10 11 12/13 14 15|16 17 18 19 20 21 22 23 24 25 26 27 28|29 30 31 

Bits Field Name Description 

0:12 Reserved Bits are not implemented; all bits read back zero. 

13:15 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 

16:28 Reserved Bits are not implemented; all bits read back zero. 

29:31 RclassID Replacement class identifier 
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12.1.15 Hardware Implementation Register 0 (HIDO) 











Multithreading? 


Register Short Name HIDO Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 1008 Register Duplicated for No 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 
































































































































Specification Type Implementation-specific register Unit IU 
o 
ne} 
fe} 
E 
® o 2 2 x 
N oO 5 pe] c= Cc 
SDD © 2 g 2 2 2 
5 225 6 S$ 55g ES 
A @@ 3 3 3B F-57789 §—=~6 583 g 
CT UF S O lr £ > | | > E 
ne = Evo I auc EST 
22e7xr or 5 o 38 Iž eS I d 
Rsd! 8 $888% Rsvd_l Sass S24 SESS 
© oe yt SELESELE oe ey 
lo 1 2/3/4]5|6|7/[8/9 10 11 12 13 14 15 16 17 18 19 20 21|22/23| 24] 25 | 26 | 27 | 28 | 29] 30/31 | 
Reserved 
4 4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
0:2 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Issue serialize mode 
3 issue_serialize 9 Normal operation i . . : i , 
1 Next instruction is not issued until all previous instructions have completed (no dual-issue 
either). 
Opcode compare 0 takes a maintenance interrupt on an opcode compare match. This is a hardware 
debug facility that is not visible to software. 
The IU supports two opcode compare facilities that are 32-bit compares under mask control. A hit is 
4 op0_debug detected when all bits are to be compared, as indicated when the bit-wise mask bits are equal. The 
compare is not thread based. Action is taken at the commit point of a matching instruction. 
0 Opcode compare 0 does not take a maintenance interrupt. 
1 Opcode compare 0 takes a maintenance interrupt on an opcode compare match. 
Opcode compare 1 takes a maintenance interrupt on an opcode compare match. This is a hardware 
debug facility that is not visible to software. 
5 op1_debug i 7 
0 Opcode compare 1 does not take a maintenance interrupt. 
1 Opcode compare 1 takes a maintenance interrupt on an opcode compare match. 
Opcode compare 0 causes an internal flush to that thread. 
6 op0_flush 0 Opcode compare 0 does not cause an internal flush. 
1 Opcode compare 0 causes an internal flush to that thread. 
Opcode compare 1 causes an internal flush to that thread. 
7 op1_flush 0 Opcode compare 1 does not cause an internal flush. 
1 Opcode compare 1 causes an internal flush to that thread. 
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Bits Field Name Description 
Address trace mode 
0 Every time an address trace event occurs, the address for the new event is sent to the 
8 address_trace_mode trace array. The partial address of the older event is recorded. 
1 The whole 64-bit address is sent to the trace array every time. Events occurring while writ- 
ing a 64-bit address are ignored. 
9:21 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Enable thermal management interrupt to wakeup suspended thread 
22 therm k ; 
ees Note: Wakeup occurs even if HIDO[therm_intr_en] = ‘0’. 
23 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Enable system error interrupt to wakeup suspended thread 
Allows the system error interrupt to wake up either thread that is dormant. When a system error 
interrupt is received, if this bit is enabled the interrupt wakes up the thread that the interrupt was 
24 syserr wakeu intended for (or possibly both threads). For example, if thread 0 is dormant, thread 1 is active, 
yserr_ P syserr_wakeup is set, and the interrupt is for thread 0, then thread 0 is awakened. (The active 
thread [thread 1] is unaffected because it is already awake.) If both threads are dormant and if 
syserr_wakeup is set, the interrupt awakens both threads. 
Note: Wakeup occurs even if HIDO[en_syserr] = ‘0’. 
Enable extended external interrupt 
The PowerPC Architecture specifies that external interrupts use HSRRO and HSRR1 to save and 
restore external interrupts when LPCR[LPESO] = ‘0’. 
This bit also enables the mediated external interrupt feature. 
25 extr_hsrr 0 Normal operation (direct external interrupts) 
1 Enabled (mediated external interrupt enabled) 
Note: In the case of mediated external interrupts, setting LPCR[MER] before disabling a thread 
with an mtctrl instruction awakens the thread if TSCR[WEXT] is set, even if HIDO[25] = ‘0’, which 
normally disables mediated external interrupts. 
Enable precise machine check 
26 en_prec_mchk Note: All loads to caching-inhibited (I = ‘1’) space cause the thread to be blocked at dispatch until 
data is returned for the load. 
27 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Service processor control 
0 ATTN only inactivates the thread issuing the instruction. 
28 qattn_mode . : ; ‘ p , 
1 ATTN on one instruction also inactivates the other thread and causes it to go into 
maintenance. 
Master thermal management interrupt enable 
29 ihermuintr-n Clearing this bit disables all thermal management interrupts regardless of the MSR state. 
aa 0 Disables all thermal management interrupts regardless of the MSR state. 
1 Enabled 
Enable system errors 
30 Sh eieank System errors generated from outside the PPE. 
ail 0 Disabled 
1 Enabled 
Enable attention instruction (enable support processor attn instruction) 
31 en_atin This is a hardware debug facility that is not visible to software. It enables the attn instruction to qui- 
esce the processor. If this bit is disabled, the attn instruction is treated as an illegal instruction. 
32:63 Reserved Bits are not implemented; all bits read back zero. 
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Programming Note: 
e After POR, this register is set to x‘0000_0000_0000_0000’. In normal operation, the hypervisor should 
set this register to its preferred value of x‘0000_0047_0000_0000’ before booting the system. 


e After POR, no changes to this register are necessary in typical operating mode. The only reason to 
change any field of this register is for diagnostic purposes in a lab environment. 
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Register Short Name 


HID1 








Multithreading? 


Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 1009 Register Duplicated for No 





Value at Initial POR 


All bits set to zero 


Value During POR Set By 


Scan initialization during POR 













































































































































































Specification Type Implementation-specific register Unit IU 
g i S 5 
g A 5 4 3 2 A 
o £ U is oO Q 
E 6 =i $ 2 = a S g E o 2 a S 
ai ai S 2 2 s g 2 = Si al E a a | aa 
E8$@s S 2 @ 55858 pet § Pvt § Rel 2B 
ee r4r tt 44444 F vy vy 
0/1/2]/3ļ]/4 5|6/7 8] 9 |10}11)12)13)14)15 16 17 18)19)20 21 22 23 24/25/26 27 28 29 30/31 
= eat 
a 2 t ez 5 ë L © 
8 B 5 5 8 oo Š 5 
| | | el o O | | 
Q co) Q o Q © S ® Q 
1S) [S] QO QO O = = [S] [S] 
g gS © S S l g g 
= = =| E H 2 Z =| + 
pu_trace_byte_ctrl a = a 2a a iutrigger_ctrl iu_triggeren g€ € a a 
y Yyvy vy Vide vy t4 lyvyy 
32 33 34 35 36 37 38 39/40 41/42 43 44/45 46 47) 48/49/50 51 52 53/54 55 56 57|58/59/60 61/62 63 
Bits Field Name Description 
Branch history table prediction mode 
0 bht_pm 0 Static prediction. A conditional branch instruction is always predicted as not taken. 
1 The branch history table (BHT) is used for branch prediction. 
Disable global branch history branch prediction 
1 dis_gshare 0 The global branch history is active. 
1 Forces global history bits to zero (which disables the global branch history). 
2 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Enable link stack 
3 en_ls 0 Disable link stack. The predicted branch target address is always x‘0’. 
1 Enable link stack. All four entries of the link stack are used. 
Enable instruction cache way (one bit per way) 
00 Cache disabled 
10 Way A enabled 
4:5 en_icway 01 Way B enabled 
11 Cache enabled 
Note: The L1 instruction cache is thread independent; that is, all instructions access the same 
cache. A and B refer to the way or set (a product of 2-way associativity in the cache). 
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Bits Field Name Description 
Flush instruction cache 
This bit can be used to flush the instruction cache. When this bit is changed from ‘0’ to ‘1’, hardware 
detects this change and flushes the entire instruction cache. 
6 flush_ic Note: to , : ee 
e Software has to reset this bit after it is set (this is called a sticky bit). This bit has to be set to ‘0’ 
before setting it to ‘1’ to trigger a flush, which is positive-edge triggered. 
e The change state only occurs in a set that is enabled. If the set is disabled, then there is noth- 
ing to flush (it is already marked as invalid or already flushed). 
7:8 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Enable forced icbi match mode. 
In this mode, whenever an icbi is presented to the processor, the eight entries in the instruction 
cache that correspond to the real address (least significant 12 bits) of the line are invalidated. Eight 
icbi entries are invalidated because there are four congruence classes per way where an entry can be 
9 en_Icbl stored because bits 50:51 of the effective address (EA) (not RA) are used to index the instruction 
cache. 
0 Disable 
1 Enable 
Enable instruction fetch cacheability control 
10 anit- cach 0 All instruction fetch accesses are treated as caching inhibited (regardless of the state of the 
= page table | bit). 
1 The state of the page table | bit controls instruction fetch cacheability. 
Select which cacheability control rule to use 
11 sel_cach_rule 0 Configuration ring 
1 Hardware implementation dependent (HID) register 
Graphics rounding mode 
12 grap_md The vector/single instruction, multiple data (SIMD) multimedia extension unit (VXU) operates in 
graphics rounding mode. 
Disable parity error reporting and recovery 
13 dis_pe 0 Normal operation 
1 Disable 
Force instruction cache parity error 
0 Normal operation 
14 ic_pe 1 Inject a parity error into the instruction cache. 
Note: Software has to reset this bit after it is set (this is called a sticky bit). This bit has to be set to 
‘0’ before setting it to ‘1’ to trigger a parity error, which is positive-edge triggered. 
15:18 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Disable configuration ring system reset interrupt address register 
i 0 Enable (jump to configuration ring register value) 
1 i rst_re ‘ i 
2 dis_sysrstreg |, Disable (jump to x‘100’) 
This only applies to thread 0. For thread 1, always jump to x‘100’ on a system reset interrupt. 
20:24 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Enable instruction prefetch 
25 en_i_prefetch 0 Normal operation 
1 Enable 
26:30 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Enable PPU performance monitor/debug bus 
31 pu_trace_en 0 PPU bus is disabled. Debug bus latches do not clock functionality. 
1 PPU bus is enabled. Debug bus latches clock functionality. 
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Bits Field Name Description 








Byte enables for PPU performance monitor bus/global debug bus 





32:39 pu_trace_byte_ctrl |O PPU bus is disabled for byte x. 

1 PPU bus is enabled for byte x. 

PPU trace bus [0:63] output control 

00 Disable trace bus [0:63] (place zeros on bus). 
40:41 pu_trace_ctrl2 01 Select IU [0:63] trace bus. 

10 Select XU [0:63] trace bus. 

11 Select VSU [0:63] trace bus. 





PPU trace bus [64:95] output control 

000 Disable trace bus [64:95] (place zeros on bus). 
001 Select XU [0:31]. 

42:44 pu_trace_ctrl3 010 Select XU [64:95]. 

011 Select VSU [0:31]. 

100 Select VSU [64:95]. 

101 Select IU [64:95]. 





PPU trace bus [96:127] output control 

000 Disable trace bus [96:127] (place zeros on bus). 
001 Select VSU [32:63]. 

45:47 pu_trace_ctrl4 010 Select VSU [96:127]. 

011 Select XU [32:63]. 

100 Select XU [96:127]. 

101 Select IU [96:127]. 





PPU trace bus [0:63] output control 








48 pu_trace_ctrlO 0 Place PPU trace bus [0:63] on [0:63] output. 
1 Place PPU trace bus [64:127] on [0:63] output. 
PPU trace bus [64:127] output control 
49 pu_trace_ctrl1 0 Place PPU trace bus [64:127] on [64:127] output. 
1 Place PPU trace bus [0:63] on [64:127] output. 
IU trigger bus control 
0 IABR match thread 0 should be placed on IU trigger bus bit x. 
1 IABR match thread 1 should be placed on IU trigger bus bit x. 
50:53 iu_trigger_ctrl Bit [50] controls trigger bus bit [0]. 


Bit [51] controls trigger bus bit [1]. 
Bit [52] controls trigger bus bit [2]. 
Bit [53] controls trigger bus bit [3]. 





IU trigger bus enable 


0 Pass XU trigger bus onto PPU trigger bus for bit x. 
1 Pass IU trigger bus onto PPU trigger bus for bit x. 
54:57 iu_trigger_en Bit [54] controls trigger bus bit [0]. 


Bit [55] controls trigger bus bit [1]. 
Bit [56] controls trigger bus bit [2]. 
Bit [57] controls trigger bus bit [3]. 





MMU ramp controls for PPU trace bus [0:31] 




















58 mmu_trace_ctrlO 0 Do not place MMU trace bus on final PPU trace bus output bits [0:31]. 
1 Place MMU trace bus on final PPU trace bus output bits [0:31]. 
MMU ramp controls for PPU trace bus [64:95] 
59 mmu_trace_ctrl1 0 Do not place MMU trace bus on final PPU trace bus output bits [64:95]. 
1 Place MMU trace bus on final PPU trace bus output bits [64:95]. 
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Bits Field Name Description 
PPU trace bus [0:31] output control 
PI PPU t :31 :31 tput. 
60:61 pu_trace_ctri5 00 ace PPU trace bus [0:31] on [0:31] outpu 


01 Place PPU trace bus [32:63] on [0:31] output. 
10 Place PPU trace bus [64:95] on [0:31] output. 





62:63 








pu_trace_ctrl6 





PPU trace bus [32:63] output control 

00 Place PPU trace bus [32:63] on [32:63] output. 
01 Place PPU trace bus [0:31] on [32:63] output. 
10 Place PPU trace bus [96:127] on [32:63] output. 








Programming Note: 
e After POR, this register is set to x‘0000_0000_0000_0000’. In normal operation, the hypervisor should 
set this register to its preferred value of x‘9C30_1040_0000_0000’ before booting the system. 


e After POR, no changes to this register are necessary in typical operating mode. The only reason to 
change any field of this register is for diagnostic purposes in a lab environment. 
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12.1.17 Hardware Implementation Register 4 (HID4) 











Register Short Name HID4 Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 1012 Register Duplicated for No 


Multithreading? 





Value at Initial POR 


All bits set to zero Value During POR Set By | Scan initialization during POR 








Specification Type 





Unit XU 








Implementation-specific register 





j 


Rsvd_l 
—acpc 
Rsvd_l 


Rsvd_l 


en_dway Rsvd_l 


M vy 4 





< dis_force_ci 
<— enb_force_ci 


l Imq_size 


< force_ai 





N |<«— dis_hdwe_recov 


tm |<— dis_dci 
w |<— hdwe_err_inj 




















© |<— I1dc_flsh 
o|<— Rsvd_l 
o|<— force_geq1 
hj |<— tch_nop 


= 
=k 


13 14 15|16 17 


= 
œ 
aš 
o 

















20 21 22 23/24 25 26 27 28 29 30 31 























Reserved 





4 





32 33 34 35 36 37 38 39 





40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 











Bits Field Name 


Description 








0:1 Rsvd_l 


Reserved. Latch bit is implemented; the value read is the value written. 





2 dis_dcpc 


Disable data cache parity checking 

Prevents Fault Isolation Register (FIR) updates and recovery. 
0 Normal operation 

1 Disable data cache parity checking. 





3 hdwe_err_inj 


Inject parity error into cache 


Forces a 1-bit error somewhere in both of the 32-byte blocks that are being reloaded to the data 
cache. Used for hardware initialization. 


0 Normal operation 
1 Inject a parity error into the cache. 





4:6 Rsvd_l 


7 dis_hdwe_recov 


: Reserved. Latch bit is implemented; the value read is the value written. 


Disable data cache parity error hardware recovery 

FIR bits are still reported to the MMU to cause a machine check or checkstop. 
0 Normal operation 

1 Disable data cache parity error hardware recovery. 





8 l1dc_flsh 








L1 data cache flash invalidate 
0 Normal operation 
1 All sectors set to invalid and held invalid. (Implemented as an edge detect) 
Note: 
e Software has to reset this bit after it is set (this is called a sticky bit). This bit has to be set to ‘0’ 
before setting it to ‘1’ to trigger a flush, which is positive-edge triggered. 


e The change state only occurs in a set that is enabled. If the set is disabled, then there is noth- 
ing to flush (it is already marked as invalid or already flushed). 


e Implemented as an edge detect. 
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Bits 


Field Name 


Description 








Rsvd_l 


Reserved. Latch bit is implemented; the value read is the value written. 





10 


force_geq1 


Force all load instructions to be treated as if being loaded to guarded storage 
0 Normal operation 


1 Force all load instructions to be treated as if being loaded to guarded storage. In the PPU, 
this causes touch instructions (such as debt) to be treated as nop instructions. This might 
also have an effect on the ordering of stores in the core interface unit (CIU). 





11 


force_ai 


Force an alignment interrupt instead of microcode on unaligned operations 


Used for debugging. Prevents misaligned flushes. Any load or store that spans a 32-byte boundary 
(or an 8-byte boundary in DABR mode) takes an alignment interrupt. 


0 Normal operation 
1 Force alignment interrupt. 





12 


tch_nop 


Force data cache block touch x-form (debt) and data cache block touch for store (dcebtst) instruc- 
tions to function like nop instructions. Only performs the translation. 


0 Normal operation 
1 Force debt and debtst to function like nop instructions. 





13:15 


Imq_size 


Maximum number of outstanding demand requests to the memory subsystem 
(only applies to loads) 


000 Eight outstanding requests to the PowerPC processor storage subsystem (PPSS) 
111 Seven outstanding requests to the PPSS 

110 Six outstanding requests to the PPSS 

101 Five outstanding requests to the PPSS 

100 Four outstanding requests to the PPSS 

011 Three outstanding requests to the PPSS 

010 Two outstanding requests to the PPSS 

001 One outstanding requests to the PPSS 





16:17 


Rsvd_l 


Reserved. Latch bit is implemented; the value read is the value written. 





18 


dis_force_ci 


(0) Force data cache inhibit, unless HID4[19] disables. 


1 Use effective-address-to-real-address translation (ERAT) cache inhibit bit 
(normal translation). 





19 


enb_force_ci 


Enable force_data_cache_inhibit (only valid if dis_force_ci = 0) 
(0) Use configuration ring (PPU/XU bit 174 [cfg_force_ci]). 
1 Use HID4[18] 





20:23 


en_dway 


Enable L1 data cache way (one bit per way) 
Bit 20 enables L1 data cache way A when set to ‘1’. 
Bit 21 enables L1 data cache way B when set to ‘1’. 
Bit 22 enables L1 data cache way C when set to ‘1’. 
Bit 23 enables L1 data cache way D when set to ‘1’. 
Notes: 
e At POR, the cache is disabled. 
e When all bits are zero, no writes to the L1 data cache occur. 
e When the L1 data cache is completely disabled, microcoded loads and stores do not work. 


e Changing the value of these bits at any state other than immediately after a POR is not recom- 
mended (undefined behavior might result). If any tag in the cache has been allocated (that is, a 
valid bit is on), then a flash invalidate of the tag must occur. This can be achieved by setting 
and then resetting HID4(8). 





24:31 


Rsvd_l 


Reserved. Latch bit is implemented; the value read is the value written. 





32:63 








Reserved 





Bits are not implemented; all bits read back zero. 
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Programming Note: 
e After POR, this register is set to x‘0000_0000_0000_0000’. In normal operation, the hypervisor should 
set this register to its preferred value of x‘0000_3F00_0000_0000’ before booting the system. 


e After POR, no changes to this register are necessary in typical operating mode. The only reason to 
change any field of this register is for diagnostic purposes in a lab environment. 
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12.1.18 Hardware Implementation Register 6 (HID6) 











Register Short Name HID6 Privilege Type Hypervisor 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number 1017 Register Duplicated for No 


Multithreading? 








































































































Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Hardware implementation regis- Unit MMU 
ter 
2 
a 
g v 35 
= 2 3 g 
kej 9 E 3) 
> a o D 
debug £ 8 Rsvd_l 2 LB Reserved RMSC £ 
J Ss} y ie vy vy a a 
[o 1 2 3 4 5 6 7/8 910/11 12 13 14|15|16 17 18 19/20 21 22 23 24 25/26 27 28 29/30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Debug and performance select 
x‘80’ Selects performance bus (default value) 
x40 MMU control and SPR read debug 
x‘20’ Snoop interface and SLB control debug 
; x‘10 PPU interface debug 
9: debug x‘08’ LRU and SPR control debug 
x‘04 Timebase debug 
x‘02’ TLB control and snoop control debug 
x‘01’  Tablewalk and PPE TLB index debug 
No other combinations are meaningful. This field is for hardware debug purposes only. 
8:9 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
10 debug snablè Turn on the performance or debug bus for the MMU (see bits [0:7] for performance and debug 
ug_ select controls). This field is for hardware debug purposes only. 
11:14 Rsvd_l Reserved. Latch bit is implemented; the value read is the value written. 
Time-base and decrementer facility enable 
15 tb_enable (0) TBU, TBL, DEC, HDEC, and the hang-detection logic do not update 
F (all update signals from the pervasive logic are ignored). 
1 TBU, TBL, DEC, HDEC, and the hang-detection logic are enabled to update. 
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Bits Field Name Description 
Large page bit table 
If L = ‘1’ and LP = ‘0’, then Large Page Size 1 is used. 
If L = ‘1’ and LP = ‘1’, then Large Page Size 2 is used. 
Large Page Size: 
Size 1 Size 2 
0000 16MB 16MB 
0001 16MB 1MB 
16:19 LB 0010 16MB 64KB 
0100 1MB 16MB 
0101 1MB 1MB 
0110 1MB 64KB 
1000 64KB 16MB 
1001 64KB 1MB 
1010 64KB 64KB 
All other combinations are reserved. 
20:25 Reserved Bits are not implemented; all bits read back zero. 
26:29 RMSC PPE real-mode storage control facility 
30:63 Reserved Bits are not implemented; all bits read back zero. 








Programming Note: 
e After POR, this register is set to x‘0000_0000_0000_0000’. In normal operation, the hypervisor sets 


HID6[tb_enable] to ‘1’. 


e Programming details for HID6[tb_enable], HID6[LB], and HID6[RMSC] can be found in the sections listed 


under “Additional Information” for each field description. 
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12.1.19 CBEA-Compliant Processor Version Register (BP_VR) 


The Cell Broadband Engine Architecture (CBEA)-Compliant Processor Version Register is a 32-bit read-only 
register that contains values that identify the version and revision level of the CBEA-compliant processor. The 
contents of the CBEA-Compliant Processor Version Register are only accessible using a PPE move-from 
special-purpose register (mfspr) instruction. Read access to the CBEA-Compliant Processor Version 
Register is privileged; write access is not provided. There is only one CBEA-Compliant Processor Version 
Register per CBEA-compliant processor. 


Version numbers are assigned by the CBEA process. Revision numbers are assigned by an implementation- 
defined process. The values currently assigned to these fields are as follows: 
































Design Level Version Revision 
10KE DD 1.0 x‘0000’ x‘0000’ 
10KE DD 1.1 x‘0000’ x‘0001’ 
10KE DD 2.0 x‘0000’ x‘0100’ 
10KE DD 3.0 x‘0000’ x‘0200’ 
10KE DD 3.1 x‘0000’ x‘0201’ 
10KE DD 3.2 x‘0000’ x‘0202’ 
65 nm DD 1.1 x‘0000’ x‘1000’ 





Note: The BP_VR is updated if the latch-to-latch paths of every unit in the CBE processor are not logically 
and functionally equivalent to the previous version (that is, if any unit is not Verity clean with the previous ver- 


sion). 





Register Short Name 


BP_VR 


Privilege Type 


Read: Privileged 





























Access Type SPR Read only Width 32 

Decimal SPR Number 1022 Register Duplicated for No 
Multithreading? 

Value at Initial POR x‘00000000_00000202’ Value During POR Set By Hardwired 

(for DD 3.2) 

Value at Initial POR x‘00000000_00001000’ Value During POR Set By Hardwired 

Specification Type CBEA architected register Unit XU 





Additional Information: 


e For additional information, see Cell Broadband Engine Architecture. 
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Register Short Name PIR Privilege Type Read: Privileged 
Access Type SPR Read only Width 32 bits 
Decimal SPR Number 1023 Register Duplicated for Yes 
Multithreading? 
Value at Initial POR [0:22] 0 Value During POR Set By Scan initialization during POR 


[23:30] Set by configuration 


chain. 


Configuration ring 






































[31] O for thread O 
1 for thread 1 
Specification Type PowerPC architected register Unit XU 
PROCID 
4 4 
012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Bits Field Name Description 
0:31 PROCID Processor ID 

















Additional Information: 


e For additional information, see PowerPC Operating Environment Architecture, Book III. 
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12.2 Special Architected Registers 


This section describes registers that have been architected to meet special requirements. These registers 
have unique characteristics, uses, and applications. 


12.2.1 Machine State Register (MSR) 











Value at Initial POR 


Register Short Name MSR Privilege Type Privileged 
Access Type SPR Read/Write Width 64 bits 
Decimal SPR Number N/A Register Duplicated for Yes 


Multithreading? 


All bits set to zero Value During POR Set By Scan initialization during POR 
























































































































































Specification Type PowerPC architected register Unit IU 
ne} 
o 
fa 
D 
SF TA @ HV Reserved 
> 
tye dd 
[o 1/2/34 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
ge] ne} 
“=j S c 
2 [e] i D 2 2 
Reserved x Reserved ILE EE PR FP ME € SE BE & £ IR DR = RI LE 
< 
yy te yee eee tee ett 
32 33 34 35 36 37/38/39 40 41 42 43 44 45 46| 47 | 48) 49| 50] 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 
Bits Field Name Description 
64-bit mode 
0 SF 0 The processor is in 32-bit mode. 
1 The processor is in 64-bit mode. 
A TA Tags-active mode 
This mode is not supported. This bit is reserved and is forced to zero. 
2 Reserved Bits are not implemented; all bits read back zero. 
Hypervisor state 
3 HV 0 The processor is not in hypervisor state. 
1 If MSR[PR] = ‘0’, then the processor is in hypervisor state; otherwise, the processor is in 
problem state. 
4:37 Reserved Bits are not implemented; all bits read back zero. 
VXU 
38 VXU 0 The processor cannot execute VXU instructions. If the processor attempts to execute a 
VXU instruction, this causes a VXU unavailable interrupt. 
1 The processor can execute VXU instructions. 
39:46 Reserved Bits are not implemented; all bits read back zero. 
47 ILE Interrupt little-endian mode 
This mode is not supported. This bit is reserved and forced to ‘0’. 
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Bits 


Field Name 


Description 








48 


EE 


External interrupt enable 
0 External and decrementer interrupts are disabled. 
1 External and decrementer interrupts are enabled. 





49 


PR 


Problem state 
0 The processor is in privileged state. 
1 The processor is in problem state. 





50 


FP 


Floating-point available 
0 The processor cannot execute any floating-point instructions. 
1 The processor can execute floating-point instructions. 





51 


52 


ME 


FEO 


Machine check enable 

0 Machine check interrupts are disabled. 

1 Machine check interrupts are enabled. 

Note: This bit is a hypervisor resource, and can only be modified by rfid and hrfid instructions 
while in hypervisor mode. (See PowerPC Operating Environment Architecture, Book III.) 


Floating-point exception 0 


The PPE does not support imprecise-unrecoverable mode or imprecise-recoverable mode. The 
Floating-Point Exception Mode bits, FEO and FE1, are interpreted as shown below: 


[FEO] [FE1] Mode 

0 0 Ignore exceptions mode 
0 1 Precise mode 

1 0 Precise mode 

1 1 Precise mode 





53 


SE 


Single-step trace enable 

0 The processor executes instructions normally. 

1 The processor generates a single-step type of trace interrupt after successfully completing 
the execution of the next instruction (unless that instruction is rfid, hrfid, attn, or sc, which 
are never traced). Successful completion signifies that the instruction caused no other 
interrupt. 





54 


BE 


Branch trace enable 
0 The processor executes branch instructions normally. 


1 The processor generates a branch type of trace interrupt after completing the execution of 
a branch instruction, whether or not the branch is taken. 





55 


FE1 


Floating-point exception 1 
Note: See the description of the FEO bit in this register 





56 


Rsvd_l 


Reserved. Latch bit is implemented; the value read is the value written. 





57 


Reserved 


Bits are not implemented; all bits read back zero. 





58 


IR 


Instruction relocate 
(0) Instruction address translation is off. 
1 Instruction address translation is on. 





59 


DR 


Data relocate 
0 Data address translation is off. 
1 Data address translation is on. 





60 


Reserved 


Bits are not implemented; all bits read back zero. 





61 


PMM 


Performance monitor mark 
This bit is reserved and forced to zero. 





62 








RI 





Recoverable interrupt 
(0) Interrupt is not recoverable. 
1 Interrupt is recoverable. 
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Bits Field Name Description 
Little-endian mode 

63 LE This mode is not supported. This bit is reserved and forced to ‘0’, which means the mode is always 
big-endian. 

















Programming Note: 
e A system reset sets the POR value of this register to the value indicated by the system reset interrupt. 
This value is x‘9000_0000_0000_0000’ (where the 9 means MSR[0] is set to ‘1’ and MSR[3] is set to ‘1’). 


Additional Information: 
e For additional information, see PowerPC Operating Environment Architecture, Book III. 
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Appendix A. Registers Defined in the CBEA 


The tables below list the Cell Broadband Engine (CBE) registers whose implementation is identical to the 


architecture. 


A.1 SPE Privilege 1 Registers 


Table A-1. SPE Privilege 1 Registers 





Register Name and (Short Name) 


Additional Information 





Class 1 Interrupt Mask Register (INT_Mask_class1) 
Class 1 Interrupt Status Register (INT_Stat_class1) 


See Cell Broadband Engine Architecture 


See Cell Broadband Engine Architecture 





MFC Address Compare Control Register (MFC_ACCR) 


Section A.5.1 on page 336 





MFC Atomic Flush Register (MFC_Atomic_Flush) 
MFC Data Address Register (MFC_DAR) 


Section A.5.2 on page 336 
Section A.5.3 on page 337 





MFC Data-Storage Interrupt Status Register (MFC_DSISR) 


Section A.5.4 on page 337 





MFC Real Mode Address Boundary Register (MFC_RMAB) 
MFC State Register 1 (MFC_SR1) 


Section A.5.5 on page 337 
Section A.5.6 on page 337 





MFC TLB Invalidate All Register (MFC_TLB_Invalidate_All) 


Not implemented 





MFC TLB Replacement Management Table Index Register 
(MFC_TLB_RMT_Index) 


Not implemented. See Section A.5.7 on page 337. 





MFC Version Register (MFC_VR) 


Section A.5.8 on page 338 





SPU Version Register (SPU_VR) 











Section A.5.9 on page 339 





A.2 SPE Privilege 2 Registers 


Table A-2. SPE Privilege 2 Registers 





Register Name and (Short Name) 


Additional Information 





MFC Control Register (MFC_CNTL) 


Section A.6.1 on page 340 





SLB Effective Segment ID Register (SLB_ESID) 


Section A.6.2 on page 340 





SLB Invalidate All Register (SLB_Invalidate_All) 


Section A.6.3 on page 340 





SPU Channel Data Register (SPU_ChniData) 


Section A.6.4 on page 340 





SPU Channel Index Register (SPU_Chnilndex) 


Section A.6.5 on page 340 





SPU Configuration Register (SPU_Cfg) 


Section A.6.6 on page 341 





SPU Outbound Interrupt Mailbox Register (SPU_OutintrMbox) 


Section A.7 on page 341 





SPU Privileged Control Register (SPU_PrivCntl) 








Section A.7.1 on page 341 
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A.3 SPE Problem State Registers 


Table A-3. SPE Problem State Registers 



































Register Name and (Short Name) Additional Information 
MFC Command Tag Register (MFC_Tag) Section A.8.1 on page 341 
MFC Effective Address Low Register (MFC_EAL) Section A.8.3 on page 342 
MFC Transfer Size Register (MFC_Size) Section A.8.4 on page 342 
Proxy Tag-Group Query Mask Register (Prxy_QueryMask) Section A.8.5 on page 342 
Proxy Tag-Group Query Type Register (Prxy_QueryType) Section A.8.6 on page 342 
Proxy Tag-Group Status Register (Prxy_TagStatus) Section A.8.7 on page 342 
SPU Signal Notification Register 1 (SPU_Sig_Notify_1) Section A.8.8 on page 342 
SPU Signal Notification Register 2 (SPU_Sig_Notify_2) Section A.8.9 on page 342 
SPU Outbound Mailbox Register (SPU_Out_Mbox) Section A.9.1 on page 343 
SPU Inbound Mailbox Register (SPU_In_Mbox) Section A.9.2 on page 343 











A.4 BIC 0 and BIC 1 MMIO Registers 


Table A-4. BIC 0 and BIC 1 MMIO Memory Map (BCIk Domain) 





Register Name and (Short Name) Additional Information 








Interface n Initialization Register (IFnINIT [n = 0, 1]) Section A.10.1 on page 344. 














A.5 SPE Privilege 1 Registers 


A.5.1 MFC Address Compare Conirol Register (MFC_ACCR) 


The MFC_ACCR allows the detection of direct memory access (DMA) to a virtual page marked with the 
address compare (AC) bit in the page-table entry (PTE) set and a range within the local storage. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.5.2 MFC Atomic Flush Register (MFC_Atomic_Flush) 


The MFC_Atomic_Flush Register is implementation dependent, and access is privileged. Privileged software 
uses this register to clear the contents of the cache used for atomic DMA commands and TLB-update opera- 
tions. Data in the cache that is considered modified is pushed to memory, and the line is invalidated. Valid 
lines in the cache that are not considered modified are invalidated. The reservation is reset. For this operation 
to work properly, privileged software must suspend all memory flow controller (MFC) operations. 


See the Cell Broadband Engine Architecture document for more information about this register. 
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A.5.3 MFC Data Address Register (MFC_DAR) 
The MFC_DAR contains the 64-bit effective address (EA) from the DMA requests. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.5.4 MFC Data-Storage Interrupt Status Register (MFC_DSISR) 


The MFC_DSISR Register contains status bits relating to the data-storage interrupts (DSI) generated by 
the SMM. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.5.5 MFC Real Mode Address Boundary Register (MFC_RMAB) 


The MFC supports a 4-bit, real-mode boundary (RMB) field. See the Cell Broadband Engine Architecture 
document for more information about this register. 


A.5.6 MFC State Register 1 (MFC_SR1) 


The MFC_SR1 Register contains configuration information controlled by a hypervisor. Access to this register 
is privileged. This register corresponds to the PowerPC Processor Element (PPE) Machine State Register 
(MSR). 


In this implementation, MFC_SR1[58], the SPU Master Run Control (S bit), functions as an SPU-enable 
control. This bit allows privileged code the capability to temporarily suspend synergistic processor unit (SPU) 
execution and resume it again without affecting the SPU status. If the SPU is stopped and MFC_SR1[58] is 
disabled (set to ‘0’), then the SPU stays stopped. That is, the status is unchanged from the last stopped 
reason code in the SPU Status Register (SPU_Status). If MFC_SR1[58] is written with a start command, the 
SPU does not start and the SPU status remains unchanged; the last stopped reason code remains the same 
from the last stopped condition. However, reading the SPU Run Control Register (GPU_RunCntl) shows that 
the run command was accepted. If MFC_SR1[58] is then enabled (set to ‘1’), the SPU remains stopped. 
When the SPU_RunCnil Register is next written with a run command, the SPU starts execution and the 
status is updated accordingly. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.5.7 MFC TLB Replacement Management Table Index Register (MFC_TLB_RMT_Index) 


This register is not implemented in this version of the CBE. 


Implementation Note: Only one translation fault may be outstanding. The implementation can either stop all 
command queue processing on the first translation error or continue processing. If processing is continued, 
all ordering rules must be followed (a command must not be processed if it is dependent on a command that 
is waiting for a translation fault to be resolved). The state of the MFC must appear as if the command (or 
partial command) were never issued. This is also the case if a second translation fault occurs. 
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A.5.8 MFC Version Register (MFC_VR) 


The MFC_VR Register contains a 32-bit value that identifies the specific version (model) and revision level of 
the MFC portion of the Cell Broadband Engine Architecture. The contents of this register are accessible from 
the PPE by using a load doubleword (Id) instruction. Read access to the MFC_VR Register from the PPE is 
privileged, and write access is not provided. Access to this register from the MFC is not provided. There is 
one MFC_VR Register for each MFC in a Cell Broadband Engine. 


Version numbers are assigned by the MFC architecture process. Revision numbers are assigned by an 
implementation-defined process. 


The MFC_VR Register distinguishes between processors that differ in attributes that may affect software. It 
contains two fields: Version and Revision. The values currently assigned to these fields are as follows: 





























Design Level Version Revision 
10KE DD 1.0 x‘0000’ x’0000’ 
10KE DD 1.1 x‘0000° x’0001’ 
10KE DD 2.0 x‘0000’ x’0100’ 
10KE DD 3.0 x‘0000’ x’0200’ 
10KE DD 3.1 x‘0000° x’0201’ 
10KE DD 3.2 x‘0000’ x’0202’ 
65 nm DD 1.1 x‘0000’ x’1000’ 

















Note: The MFC_VR is updated if the latch-to-latch path of the MFC is not logically and functionally equiva- 
lent to the previous version (that is, if the unit is not Verity clean with the previous version). 


See the Cell Broadband Engine Architecture document for more information about this register. The ‘Value at 
Initial POR’ listed below is for CMOS SOI 65 nm DD 1.1. 

















Register Short Name MFC_VR Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 

Hex Offset From SPEn: x‘400018’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 

Value at Initial POR x‘00000000_00001000’ Value During POR Set By Hardwired 
Specification Type CBEA architected register Unit MFC 




















Related Registers: Section 12.1.19 CBEA-Compliant Processor Version Register (BP_VR) and 
Appendix A.5.9 SPU Version Register (SPU_VR) 
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A.5.9 SPU Version Register (SPU_VR) 


The SPU_VR Register contains a 32-bit value that identifies the specific version (model) and revision level of 
the SPU portion of the Cell Broadband Engine Architecture. The contents of this register are accessible from 
the PPE using a load doubleword (Id) instruction. Read access to the SPU_VR Register from the PPE is priv- 
ileged, and write access is not provided. Access to this register from the SPU is not provided. There is one 
SPU_VR Register for each SPU in a Cell Broadband Engine. 


Version numbers are assigned by the SPU architecture process; revision numbers are assigned by an imple- 
mentation-defined process. 


The SPU_VR Register distinguishes between processors that differ in attributes that may affect software. It 
contains two fields: Version and Revision. The values currently assigned to these fields are as follows: 
































Design Level Version Revision 
10KE DD 1.0 x‘0000’ x‘0000’ 
10KE DD 1.1 x‘0000’ x‘0000’ 
10KE DD 2.0 x‘0000’ x‘0100’ 
10KE DD 3.0 x‘0000’ x‘0200’ 
10KE DD 3.1 x‘0000’ x‘0201’ 
10KE DD 3.2 x‘0000’ x‘0202’ 
65 nm DD 1.1 x‘0000’ x‘1000’ 














Note: The SPU_VR is updated if the latch-to-latch path of the SPU is not logically and functionally equivalent 
to the previous version (that is, if the unit is not Verity clean with the previous version). The SPU_VR is also 
updated if the BP_VR is updated, even if the SPU itself is Verity clean. 


See the Cell Broadband Engine Architecture document for more information about this register. The ‘Value at 
Initial POR’ listed below is for CMOS SOI 65 nm DD 1.1. 

















Register Short Name SPU_VR Privilege Type Privilege 1 
Access Type MMIO Read Only Width 64 bits 

Hex Offset From SPEn: x‘400020’ + (x‘02000’ x n) Memory Map Area SPE Privilege 1 
BE_MMIO_Base 

Value at Initial POR x‘00000000_00001000’ Value During POR Set By Hardwired 
Specification Type CBEA architected register Unit MFC 




















Related Registers: Section 12.1.19 CBEA-Compliant Processor Version Register (BP_VR) and 
Appendix A.5.8 MFC Version Register (MFC_VR) 
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A.6 SPE Privilege 2 Registers 


A.6.1 MFC Control Register (MFC_CNTL) 
The restart DMA operation is only effective if the DMA unit is in normal DMA queue operational status. 


The purge bit can be used in the context save/restore for clearing out the queue after an unrecoverable error 
condition or when cleaning the SPE to prepare it for a new context. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.6.2 SLB Effective Segment ID Register (SLB_ESID) 


To properly load the array with data, the segment lookaside buffer (SLB) requires a write sequence similar to 
the one for the translation lookaside buffer (TLB). First, the index must be written to specify the entry for 
loading. The virtual segment ID (VSID) and effective segment ID (ESID) fields are written independently, 
unlike the TLB writes, but the SLB_VSID write should follow the index. The SLB_ESID data is written last 
because it contains the Valid bit, and the entry should not be valid until all data is loaded. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.6.3 SLB Invalidate All Register (SLB_Invalidate_All) 


A write to SLB_Invalidate_All causes the Valid bit in all SLB entries to be set to ‘0’, making the entries invalid. 
The remaining fields of each entry are undefined. 


Writes to this register can be either 64-bit or 32-bit operations. Any write to the least significant word causes 
an entry in the SLB to be invalidated. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.6.4 SPU Channel Data Register (SPU_ChnIData) 


If the data fields in the register are less than 32 bits (such as the SPU_RdEventStat channel, the 
SPU_WrEventMask channel, and the MFC_RdListStallStat channel), then only those bits defined in the 
register are updated, and the remaining bits of write data are ignored. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.6.5 SPU Channel Index Register (SPU_ChnllIndex) 


The SPU Channel Index Register selects which SPU channel is accessed using the SPU Channel Count 
Register or the SPU Channel Data Register. Access to this register is privileged. Setting this register to chan- 
nels that are not accessible by the channel count or channel data has no effect. Reads of the nonaccessible 
channels cause the channel count or channel data to return zeros. Writes are ignored. See the Cell Broad- 
band Engine Architecture document for bit definitions. 


Note: In isolation mode, this register is forced to the SPU_WrDec channel, and all writes are ignored. The 
SPU_WrDec channel cannot be accessed through the channel count or channel data registers, therefore 
writes to this register have no effect, and reads return zeros. 
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A.6.6 SPU Configuration Register (SPU_Cfg) 


The SPU Configuration Register is used to read or set the configuration of the SPU Signal Notification Regis- 
ters (SPU_Sig_Notify_1 and SPU_Sig_Notify_2) in the SPUs. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.7 SPU Outbound Interrupt Mailbox Register (SPU_OutintrMbox) 


The PPU reads the mailbox data from the SPU in the SPU_OutIntrMbox Register. The SPU stores to this 
mailbox by writing to the SPU_WrOutIntrMbox channel (see the Cell Broadband Engine Architecture docu- 
ment for more information about the SPU Write Outbound Interrupt Mailbox Channel). When the SPU writes 
to the SPU_WrOutIntrMbox channel, the SPU_WrOutIntrMbox channel counter decrements from 1 to 0. 
Reading this register causes the SPU_WrOutIntrMbox channel counter to increment to 1. While the count is 
1, further reads to this register do not affect the count, and the read data is the last stored value in this 
register. The queue depth for this implementation is 1. 


Note: For the SPU_WrOutIntrMbox channel, the count is 1 at POR. Software reinitializes the count to 1. 


This register has the same behavior as the SPU_Out_Mbox except that the SPU_OutIntrMbox register has a 
PPU Mailbox Interrupt that allows the SPU to notify the PPU when the SPU has written data to the PPU 
Mailbox. The PPU Mailbox interrupt is asserted when the SPU_WrOutIntrMbox channel count transitions 
from 1 to 0, and deasserted when the SPU_WrOutIntrMbox channel counter increments from 0 to 1. The 
interrupt is taken when it is asserted and enabled. See the Class 2 Interrupt Mask Register 
(INT_Mask_class2) for information about how to enable this interrupt. 


See the Cell Broadband Engine Architecture document for more information about this register. 


Related Register: See the SPU Outbound Mailbox Register (SPU_Out_Mbox) on page 343. 


A.7.1 SPU Privileged Control Register (SPU_PrivCntl) 


The SPU Privileged Control Register provides privileged software with the ability to control the execution 
environment of the SPU. Access to this register is privileged. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8 SPE Problem State Registers 


A.8.1 MFC Command Tag Register (MFC_Tag) 


MFC_Size is the upper half of the memory-mapped I/O (MMIO) word and MFC_Tag is the lower half of the 
same word. This word is written using a single, 32-bit store instruction. 


See the Cell Broadband Engine Architecture document for more information about this register. 


Programming Note: The architecture allows for a future increase in the MFC_Tag register, along with the 
Prxy_QueryMask and Prxy_TagStatus registers, to 7 bits. 
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A.8.2 MFC Effective Address High Register (MFC_EAH) 


The validity of this parameter is checked asynchronously to the instruction stream. If a segment fault, 
mapping fault, or protection violation occurs, an MFC data segment exception is generated. If the address is 
not aligned, an MFC DMA alignment exception is generated. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8.3 MFC Effective Address Low Register (MFC_EAL) 


The validity of this parameter is checked asynchronously to the instruction stream. If a segment fault, 
mapping fault, or protection violation occurs, MFC data segment exception is generated. If the address is not 
aligned, MFC DMA alignment exception is generated. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8.4 MFC Transfer Size Register (MFC_Size) 


MFC_Size is the upper half of the MMIO word and MFC_Tag is the lower half of the same word. This word is 
written using a single, 32-bit store instruction. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8.5 Proxy Tag-Group Query Mask Register (Prxy_QueryMask) 
The Proxy Tag-Group Query Mask Register selects the tag groups to be included in the query operation. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8.6 Proxy Tag-Group Query Type Register (Prxy_QueryType) 


The Proxy Tag-Group Query Type Register is used by software to request that the MFC detect a tag-group 
completion condition. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8.7 Proxy Tag-Group Status Register (Prxy_TagStatus) 


The Proxy Tag-Group Status Register contains the current status of the tag groups enabled in the 
Proxy Tag-Group Query-Mask Register. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.8.8 SPU Signal Notification Register 1 (SPU_Sig_Notify_1) 


See the Cell Broadband Engine Architecture document for more information. 


A.8.9 SPU Signal Notification Register 2 (SPU_Sig_Notify_2) 


See the Cell Broadband Engine Architecture document for more information. 
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A.9 SPU Control Registers 


A.9.1 SPU Outbound Mailbox Register (SPU_Out_Mbox) 


Other processors or devices read the mailbox data from the SPU in the SPU_Out_Mbox Register. The SPU 
sends data to this mailbox by writing to the SPU_WrOutMbox channel (see the SPU Write Outbound Mailbox 
Channel (SPU_WrOutMbox) in the Cell Broadband Engine Architecture for more information). When the SPU 
writes to the SPU_WrOutMbox channel, the channel counter decrements from 1 to 0. Reading this register 
causes the SPU_WrOutMbox channel counter to increment to 1. While the channel count is 1, further reads 
to this register do not affect the count, and the read data is the last stored value in this register. The queue 
depth for this implementation is 1. 


Note: For the SPU Write Outbound Mailbox channel (SPU_WrOutMbox), the count is 1 at POR, and soft- 
ware reinitializes the count to 1. 


The SPU Outbound Interrupt Mailbox Register has the same behavior as this register, except that 
SPU_OutIntrMbox has a Mailbox Interrupt that allows the SPU to notify the PPU when the SPU has written 
data to the SPU_Out_Mbox. 


See the Cell Broadband Engine Architecture document for more information about this register. 


A.9.2 SPU Inbound Mailbox Register (SPU_In_Mbox) 


The PPE writes mailbox data to the SPU in the SPU_In_Mbox Register. This register corresponds to the 
SPU_RdInMbox channel. If this register is full, then additional writes overwrite the last entry written. The 
channel count remains at 4. 


The SPU Inbound Mailbox Threshold interrupt is used to notify the PPE when the SPU has read all of the 
SPU_In_Mbox data. The SPU Inbound Mailbox Threshold interrupt is asserted when the SPU_RdlnMbox 
channel count transitions from 1 to 0 (SPU_In_Mbox empty), and deasserted when the SPU_RdlnMbox 
channel counter increments from 0 to 1. This interrupt is almost always asserted. The interrupt is taken when 
it is asserted and enabled. 


See the Class 2 Interrupt Mask Register (INT_Mask_class2) for information about how to enable this inter- 
rupt. See the Cell Broadband Engine Architecture document for more information about the SPU Inbound 
Mailbox Threshold interrupt. 


Programming Note: The SPU_NPC Register content is not valid for an illegal instruction. 
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A.10 BIC 0 and BIC 1 MMIO Registers (BCIk Domain) 


The BIC 0 (BCIk) shared memory space starts at x‘512 000’ and ends at x‘512 3FF’. The BIC 1 (BCIk) shared 
memory space starts at x‘513 000’ and ends at x‘513 3FP’. 


A.10.1 Interface n Initialization Register (IFnINIT [n = 0,1]) 

























































































Register Short Name IFOINIT Privilege Type Privilege 1 
IFAINIT 
Access Type MMIO Read/Write Width 64 bits 
Hex Offset From x‘512200’ Memory Map Area BIC 0 BCIk 
BE_MMIO_Base x‘513200’ BIC 1 BCIk 
Value at Initial POR All bits set to zero Value During POR Set By |Scan initialization during POR 
Specification Type Implementation-specific register | Unit BIC 
[= 
7 
5 & 
Bu 
3 5 
£ È 
l E 
Z 6 
D È Rsvd_l Reserved 
44 y Vy i 
0;/1;2 3 4 5 6 7/8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 
Reserved 
< 
4 
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 
Bits Field Name Description 
Envelope Reception Enable 
0 Env_Recept_En Ignore data and valid from een until this bit is 
0 Envelope receive logic is disabled. 
1 Envelope receive logic is enabled. 
Transport Layer Transmission Enable 
il this bit is ‘1’. 
1 Transport_Trans_En Envelopes are not formed until this bit is 
0 No envelopes are formed. 
1 Envelopes are formed and passed to the link-send logic. 
2:7 Rsvd_l Reserved. Latch bits are implemented; value read is the value written. 
8:63 Reserved Bits are not implemented; all bits read back zero. 
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A.11 Additional Fault Isolation Registers 


The Cell Broadband Engine (CBE) processor contains several fault isolation registers (FIRs) for collecting 
and reporting information about errors. FIR registers are organized in two categories: global FIRs and local 
FIRs. The lowest level of error-collection is in the local FIRs, that are implemented in various units on the 
chip. The errors are then ORed together and reported in the global FIRs, which are implemented in the test 
control unit within the CBE processor pervasive logic. 


The following registers are part of a debug mode for the CBE processor and beyond the scope of this docu- 
ment. 


e BIU Fault Isolation, Error Mask, and Checkstop Enable Registers 


e IOC Fault Isolation, Error Mask, and Checkstop Enable Registers 
IOC_FIR includes error bits for the CBE interface unit and element interconnect bus (EIB). The IOC_FIR 
is unique and includes one additional register (IOC_SysErrEn ), that is not part of other FIR registers on 
the chip. The IOC_SysErrEn register is used to generate an enable for the System Error interrupt. 


e spec_att_mchk_fir Register 
The spec_att_mchk_fir Register is a status register that collects either the quiesce state from the Pow- 
erPC processor unit (PPU), or any machine check or system error interrupt conditions. 


e fir_mode_reg Register 
The fir_mode_reg Register is a global RAS logic control register. 


e fir_enable_mask Register 
The fir_enable_mask Register is a mask register for the global_fir, checkstop_fir, recoverable_fir, and 
spec_att_mchk_fir registers. 
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Address concentrator 0. 
See acknowledgment. 


A transmission control character that is sent as an affirmative response to a data 
transmission. 


A detailed specification of requirements for a processor or computer system. It 
does not specify details of how the processor or computer system must be imple- 
mented; instead it provides a template for a family of compatible implementations. 


Atomic unit. Part of an SPE’s MFC. It is used to synchronize with other processor 
units. 


Cell Broadband Engine distribution bus. 


Cell Broadband Engine Interface Unit. The BEI can be configured to attach to a 
BIF, or it can be configured to attach to an IOIF. 


Branch history table. 
Bus interface controller. Part of the Cell Broadband Engine interface (BEI) to I/O. 


Cell Broadband Engine interface. The EIB’s internal communication protocol. It 
supports coherent interconnection for to other Cell Broadband Engines and BIF- 
compliant I/O devices, such as memory subsystems, switches, and bridge chips. 
See IOIF. 


A byte-ordering method in memory where the address n of a word corresponds to 
the most significant byte. In an addressed memory word, the bytes are ordered (left 
to right) 0, 1, 2, 3, with O being the most significant byte. See little endian. 


Bus interface unit. Part of the PPE’s interface to the EIB. 


High-speed memory close to a processor. A cache usually contains recently- 
accessed data or instructions, but certain cache-control instructions can lock, evict, 
or otherwise modify the caching of data or instructions. 


A memory update policy in which the cache is bypassed, and the load or store is 
performed to or from main memory. 


A page of storage is considered caching inhibited when the “I” bit has a value of ‘1’ 
in the page table. Data located in caching inhibited pages cannot be cached at any 
memory hierarchy that is not visible to all processors and devices in the system. 
Stores must update the memory hierarchy to a level that is visible to all processors 
and devices in the system. 


Cache blocks that must be written to memory when a cache miss causes a cache 
block to be replaced. 


Cell Broadband Engine. 
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CBEA 
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Cell Broadband Engine Architecture. The Cell Broadband Engine is one implemen- 
tation of the Cell Broadband Engine Architecture. 


Central electronics complex. 


Channels are unidirectional, function-specific registers or queues. They are the 
primary means of communication between an SPE’s SPU and its MFC, which in 
turn mediates communication with the PPE, other SPEs, and other devices. These 
other devices use MMIO registers in the destination SPE to transfer information on 
the channel interface of that destination SPE. 


Specific channels have read or write properties, and blocking or nonblocking prop- 
erties. Software on the SPU uses channel commands to enqueue DMA 
commands, query DMA and processor status, perform MFC synchronization, 
access auxiliary resources such as the decrementer (timer), and perform interpro- 
cessor communication through mailboxes and signal notification. 


See also memory channel. 
Core interface unit. 
See castouts. 


Refers to memory and cache coherence. The correct ordering of stores to a 
memory address, and the enforcement of any required cache write-backs during 
accesses to that memory address. Cache coherence is implemented by a hard- 
ware snoop (or inquire) method, which compares the memory addresses of a load 
request with all cached copies of the data at that address. If a cache contains a 
modified copy of the requested data, the modified data is written back to memory 
before the pending load request is serviced. 


Cyclic redundancy check. 
combined response. 
Counter register. 

Data address register. 


An interrupt posted when a fault is encountered accessing storage or I/O space. A 
typical data storage interrupt is a page fault or protection violation. 


Data cache block touch x form instruction. 
Data cache block touch store instruction. 


A register that counts down each time an event occurs. Each SPU contains dedi- 
cated 32-bit decrementers for scheduling or performance monitoring, by the 
program or by the SPU itself. 


Data error. 


A cache in which each main memory address can appear in only one location 
within the cache, operating more quickly when the memory request is a cache hit. 
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Direct memory access. A technique for using a special-purpose controller to 
generate the source and destination addresses for a memory or I/O transfer. 


A type of MFC command that transfers or controls the transfer of a memory loca- 
tion containing data or instructions. 


A set of two queues for holding DMA-transfer commands. The SPE’s queue has 16 
entries. The PPE’s queue has four entries (two plus an additional two for L2 cache) 
for SPE-requested DMA commands, and eight entries for PPE-requested DMA 
commands. 


Direct memory access controller. A controller that performs DMA transfers. 


The specification that causes a floating-point value to be stored (internally) in the 
long format (two computer words). 


See double-precision. 

Data relocate. 

Data storage interrupt. 

Data storage interrupt status register. 

Issuing two instructions at once, under certain conditions. 
Effective address. 

See error correction code. 


An address generated or used by a program to reference memory. A memory- 
management unit translates an effective address (EA) to a virtual address (VA), 
which it then translates to a real address (RA) that accesses real (physical) 
memory. The maximum size of the effective-address space is 2 bytes. 


Element interconnect bus. The on-chip coherent bus that handles communication 
between the PPE, SPEs, memory, and I/O devices (or a second Cell Broadband 
Engine). The EIB is organized as four unidirectional data rings (two clockwise and 
two counterclockwise). 


Enforce in-order execution of I/O transaction. 


Effective-to-real address translation, or a buffer or table that contains such transla- 
tions, or a table entry that contains such a translation. 


A code appended to a data block that can detect and correct multiple bit errors 
within the block. 


Effective segment ID. 


An error, unusual condition, or external signal that may alter a status bit and will 
cause a corresponding interrupt, if the interrupt is enabled. See interrupt. 
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An option for a barrier command that causes the processor to wait for completion of 
all MFC commands before starting any commands queued after the fence 
command. It does not apply to these immediate commands: getllar, putlic and 
putlluc. 


Retrieving instructions from either the cache or main memory and placing them into 
the instruction queue. 


First in first out. Refers to one way elements in a queue are processed. It is analo- 
gous to “people standing in line.” 


Fault isolation register. 
Rambus processor bus interface. 


A way of representing real numbers (that is, values with fractions or decimals) in 32 
bits or 64 bits. Floating-point representation is useful to describe very small or very 
large numbers. 


Floating point. 


An explicitly addressable register that can be used for a variety of purposes (for 
example, as an accumulator or an index register). 


Get lock line and reserve command. 
See general-purpose register. 
Growable array file. 


Prevented from responding to speculative loads and instruction fetches. The oper- 
ating system typically implements guarding, for example, on all I/O devices. 


Hypervisor decrementer. 
Hardware-implementation dependent. 


A control (or virtualization) layer between hardware and the operating system. It 
allocates resources, reserves resources, and protects resources among (for 
example) sets of SPEs that may be running under different operating systems. 


The Cell Broadband Engine has three operating modes: user, supervisor, and 
hypervisor. The hypervisor performs a meta-supervisor role that allows multiple 
independent supervisors’ software to run on the same hardware platform. 


For example, the hypervisor allows both a real-time operating system and a tradi- 
tional operating system to run on a single PPE. The PPE can then operate a subset 
of the SPEs in the Cell Broadband Engine with the real-time operating system, 
while the other SPEs run under the traditional operating system. 


Instruction address breakpoint register. 
Instruction cache block invalidate. 


icbi queue. 
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Instruction dispatch. 
Internal interrupt controller. 


A particular processor that conforms to the architecture, but may differ from other 
architecture-compliant implementations for example in design, feature set, and 
implementation of optional features. 


A cache for providing program instructions to the processor faster than they can be 
obtained from RAM. 


Interrupt. 
A change in machine state in response to an exception. See exception. 
I/O controller. 


Cell Broadband Engine I/O Interface. The EIB’s noncoherent protocol for intercon- 
nection to I/O devices. See BIF. 


Instruction relocate. 
Instruction issue. 
Instruction unit. 

Joint Test Action Group. 
1024 bytes of memory. 


Level 1 cache memory. The closest cache to a processor, measured in access 
time. 


Level 2 cache memory. The second-closest cache to a processor, measured in 
access time. An L2 cache is typically larger than an L1 cache. 


Load doubleword instruction. 


A policy for a caching algorithm that removes from the cache the item that has the 
longest elapsed time since its last access., An algorithm used to identify and make 
available the cache space that contains the data that was least recently used. 


The bit of least value in an address, register, data element, or instruction encoding. 


The byte of least value in an address, register, data element, or instruction 
encoding. 


A byte-ordering method in memory where the address n of a word corresponds to 
the least significant byte. In an addressed memory word, the bytes are ordered (left 
to right) 3, 2, 1, 0, with 3 being the most-significant byte. See big-endian. 


An endless loop in program execution. 


Load multiple word instruction. 
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The 256-KB local store (LS) associated with each SPE. It holds both instructions 
and data. 


A function of an operating system that enables the creation of logical partitions. 
See logical partitioning. 

Logical-partition identity. 

Link register. 

See least recently used. 

See local store. 


Local Store Address. An address in the LS of an SPU, by which programs running 
in the SPU and DMA transfers managed by the MFC access the LS. 


See least significant bit. 
See least significant byte. 


A queue in an SPE’s MFC for exchanging 32-bit messages between the SPE and 
the PPE or other devices. Two mailboxes (the SPU Write Outbound Mailbox and 
SPU Write Outbound Interrupt Mailbox) are provided for sending messages from 
the SPE. One mailbox (the SPU Read Inbound Mailbox) is provided for sending 
messages to the SPE. 


The effective-address (EA) space. It consists physically of real memory (whatever 
is external to the memory-interface controller, including both volatile and nonvola- 
tile memory), SPU LSs, memory-mapped registers and arrays, memory-mapped 
I/O devices (all I/O is memory-mapped), and pages of virtual memory that reside 
on disk. It does not include caches or execution-unit register files. 


See local store. 


A pattern of bits used to accept or reject bit patterns in another set of data. Hard- 
ware interrupts are enabled and disabled by setting or clearing a string of bits, with 
each interrupt assigned a bit position in a mask register 


220 bytes of memory. 


MIC bus logic. 


An interface to external memory chips. The Cell Broadband Engine supports two 
Rambus extreme data rate (XDR) memory channels. 


An aspect of caching in which it is ensured that an accurate view of memory is 
provided to all devices that share system memory. 


Mapped into the Cell Broadband Engine’s addressable-memory space. Registers, 
SPE local stores (LSs), I/O devices, and other readable or writable storage can be 
memory-mapped. Privileged software does the mapping. 
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Cache coherency protocol: Modified, Exclusive, Recent, Shared, Invalid, plus Mu 
(Unsolicited Modified), and Tagged (T). 


Memory flow controller. It is part of an SPE and provides two main functions: 
moves data via DMA between the SPE’s local store (LS) and main storage, and 
synchronizes the SPU with the rest of the processing units in the system. 


MFC enforce in-order execution of I/O command. 
MFC synchronize command. 
Move from special-purpose register instruction. 


Memory interface controller. The Cell Broadband Engine’s MIC supports two 
memory channels. 


Memory-mapped input/output. See memory-mapped. 


Memory management unit. A functional unit that translates between effective 
addresses (EAs) used by programs and real addresses (RAs) used by physical 
memory. The MMU also provides protection mechanisms and other functions. 


The highest-order bit in an address, registers, data element, or instruction 
encoding. 


The highest-order byte in an address, registers, data element, or instruction 
encoding. 


See most significant bit. 

See most significant byte. 

Machine state register. 

See multithreading. 

Move to special-purpose register instruction. 


Simultaneous execution of more than one program thread. It is implemented by 
sharing one software process and set of execution resources but duplicating the 
architectural state (registers, program counter, flags, and so forth) of each thread. 


Noncacheable unit. 


No-operation. A single-cycle operation that does not affect registers or generate 
bus activity. 


A region in memory. The PowerPC Architecture defines a page as a 4 KB area of 
memory, aligned on a 4 KB boundary or a large page size which is implementation 
dependent. 


A page fault is a condition that occurs when the processor attempts to access a 
memory location that resides within a page not currently resident in physical 
memory. 
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A table that maps virtual addresses (VAs) to real addresses (RAs) and contains 
related protection parameters and other information about memory locations. 


Physical layer group. 
Power-on reset 


Of or relating to the PowerPC Architecture or the microprocessors that implement 
this architecture. 


A computer architecture that is based on the third generation of RISC processors. 
The PowerPC architecture was developed jointly by Apple, Motorola, and IBM. 


PowerPC Processor Element. The general-purpose processor in the Cell Broad- 
band Engine. Consists of the PPU and the PPSS. 


PowerPC Processor Storage Subsystem. Part of the PPE. It operates at half the 
frequency of the PPU and includes an L2 cache and Bus Interface Unit (BIU). 


PowerPC Processor Unit. The part of the PPE that includes execution units, 
memory-management unit, and L1 cache. 


Also known as supervisor mode. The permission level of operating system instruc- 
tions. The instructions are described in PowerPC Architecture, Book III and are 
required of software the accesses system-critical resources. 


The permission level of user instructions. The instructions are described in 
PowerPC Architecture, Books I and Il and are required of software that implements 
application programs. 


Page table entry. See page table. 

Page table entry group. 

Put lock line conditional on a reservation command. 

Put lock line unconditional command. 

Processor version register. 

A group of 16 contiguous locations starting at an address divisible by 16. 
Real address. 

Resource allocation group. 

Read-and-claim state machine. 


An address for physical storage, which includes physical memory, the PPE’s L1 
and L2 caches, and the SPE’s local stores (LSs) if the operating system has 
mapped the LSs to the real-address space. The maximum size of the real-address 
space is 24 bytes. 


Returned envelope sequence number. In the BIC. Upon successful reception of an 
envelope, a positive acknowledgment is generated back to the transmitting chip. 
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RLM 
RMT 
RPN 
RRAC 


signal 


SIMD 


SL1 
SLB 


SMM 
sndsig 


snoop 
SPE 


SPR 
SPU 


supervisor mode 


sync 
synchronization 


TAG 
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Random logic macro. 
Replacement management table. 
Real page number. 


Redwood Rambus Access Cell (RRAC) physical link (PHY). This is an early term 
for FlexlO, now obsolete. 


Information sent on a signal-notification channel. These channels are inbound (to 
an SPE) registers. They can be used by the PPE or other processor to send infor- 
mation to an SPE. Each SPE has two 32-bit signal-notification registers, each of 
which has a corresponding memory-mapped I/O (MMIO) register into which the 
signal-notification data is written by the sending processor. Unlike mailboxes, they 
can be configured for either one-to-one or many-to-one signalling. 


These signals are unrelated to UNIX signals. See channel and mailbox. 


Single instruction, multiple data. Processing in which a single instruction operates 
on multiple data elements that make up a vector data-type. Also known as vector 
processing. This style of programming implements data-level parallelism. 


A first-level cache for DMA transfers between local storage and main storage. 


Segment lookaside buffer. It is used to map an effective address (EA) to a virtual 
address (VA). 


Synergistic memory management unit. It translates EAs to RAs in an SPU. 
Send signal command. 


To compare an address on a bus with a tag in a cache, in order to detect opera- 
tions that violate memory coherency. 


Synergistic processor element. Consists of a synergistic processor unit (SPU), a 
memory flow controller (MFC), and local store (LS). 


Special-purpose register. 


Synergistic processor unit. The part of an SPE that executes instructions from its 
local store (LS). 


The privileged operation state of a processor. In supervisor mode, software, typi- 
cally the operating system, can access all control registers and can access the 
supervisor memory space, among other privileged operations. 


Synchronize command. 
The order in which storage accesses are performed. 


MFC command tag. 
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tag group 


TCU 


thread 


time base 


TKM 


TLB 


tlbie 
TS 
VA 


vector 


Vector/SIMD Multimedia 
Extension 


virtual address 


VPN 
VSID 
VSU 
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A group of DMA commands. Each DMA command is tagged with a 5-bit tag group 
identifier. Software can use this identifier to check or wait on the completion of all 
queued commands in one or more tag groups. All DMA commands except getllar, 
putlic, and putlluc are associated with a tag group. 


Pervasive unit, used for test control logic. 


A sequence of instructions executed within the global context (shared memory 
space and other global resources) of a process that has created (spawned) the 
thread. Multiple threads (including multiple instances of the same sequence of 
instructions) can run simultaneously, if each thread has its own architectural state 
(registers, program counter, flags, and other program-visible state). 


Each SPE can support only a single thread at any one time. The multiple SPEs can 
simultaneously support multiple threads. The PPE supports two threads at any one 
time, without the need for software to create the threads. The PPE does this by 
duplicating architectural state. 


Chip-level time base, as defined in the PowerPC Architecture. 


Token management unit. Part of the element interconnect bus (EIB) that software 
can program to regulate the rate at which particular devices are allowed to make 
EIB command requests. 


Translation lookaside buffer. An on-chip cache that translates virtual addresses 
(VAs) to real addresses (RAs). A TLB caches page-table entries for the most 
recently accessed pages, thereby eliminating the necessity to access the page 
table from memory during load/store operations. 


Translation lookaside buffer invalidate entry instruction. 
The transfer-size parameter in an MFC command. 
See virtual address. 


An instruction operand containing a set of data elements packed into a one-dimen- 
sional array. The elements can be fixed-point or floating-point values. Most 
Vector/SIMD Multimedia Extension and SPU SIMD instructions operate on vector 
operands. Vectors are also called SIMD operands or packed operands. 


The SIMD instruction set of the PowerPC Architecture, supported on the PPE. 


An address to the virtual-memory space, which is much larger than the physical 
address space and includes pages stored on disk. It is translated from an effective 
address (EA) by a segmentation mechanism and used by the paging mechanism to 
obtain the real address (RA). The maximum size of the virtual-address space is 2° 
bytes. 


Virtual page number. The number of the page in virtual memory. 
Virtual segment ID. 


Vector/scalar unit. 
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Vector/SIMD multimedia extension unit. 

Four bytes. 

Rambus external data representation (XDR) DRAM memory technology. 
A Rambus extreme data rate I/O memory channel. 


Execution unit. 
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